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A Important Safety Instructions 


1. 


Read and follow all warning notices and instructions marked on the product or included in the 
manual. 


Slots and openings in the housing are provided for ventilation. To ensure reliable operation of 
the product and to protect it from overheating, these slots and openings must not be blocked or 
covered. 


Do not allow anything to rest on the power cord and do not locate the product where persons 
will walk on the power cord. 


Do not attempt to service this product yourself, as opening or removing covers may expose you 
to dangerous high voltage points or other risks. Refer all servicing to qualified service 
personnel. 


General purpose cables are used with this product for connection to the network. Special 
cables, which may be required by the regulatory inspection authority for the installation site, are 
the responsibility of the customer. Use a UL Listed, CSA certified, minimum No. 24 AWG line 
cord for connection to the Digital Subscriber Line (DSL) network. 


When installed in the final configuration, the product must comply with the applicable Safety 
Standards and regulatory requirements of the country in which it is installed. If necessary, 
consult with the appropriate regulatory agencies and inspection authorities to ensure 
compliance. 


A rare phenomenon can create a voltage potential between the earth grounds of two or more 
buildings. If products installed in separate buildings are interconnected, the voltage potential 
may cause a hazardous condition. Consult a qualified electrical consultant to determine 
whether or not this phenomenon exists and, if necessary, implement corrective action prior to 
interconnecting the products. 


Input power to this product must be provided by one of the following: (1) a UL Listed/CSA 
certified power source with a Class 2 or Limited Power Source (LPS) output for use in North 
America, or (2) a certified transformer, with a Safety Extra Low Voltage (SELV) output having a 
maximum of 240 VA available, for use in the country of installation. 


In addition, since the equipment is to be used with telecommunications circuits, take the 
following precautions: 


— Never install telephone wiring during a lightning storm. 

— Never install telephone jacks in wet locations unless the jack is specifically designed for wet 
locations. 

— Never touch uninsulated telephone wires or terminals unless the telephone line has been 
disconnected at the network interface. 

— Use caution when installing or modifying telephone lines. 

— Avoid using a telephone (other than a cordless type) during an electrical storm. There may 
be a remote risk of electric shock from lightning. 

— Do not use the telephone to report a gas leak which is in the vicinity of the leak. 
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CE Marking 


When the product is marked with the CE mark on the equipment label, a supporting Declaration 
of Conformity may be downloaded from the Zhone World Wide Web site at www.zhone.com. 


FCC Part 15 Declaration 


An FCC Declaration of Conformity may be downloaded from the Zhone World Wide Web site at 
www.zhone.com. 


This device complies with Part 15 of the FCC Rules. Operation is subject to the following two 
conditions: (1) this device may not cause harmful interference, and (2) this device must accept 
any interference received, including interference that may cause undesired operation. 


The authority to operate this equipment is conditioned by the requirement that no modifications 
will be made to the equipment unless the changes or modifications are expressly approved by the 
responsible party. 


This equipment has been tested and found to comply with the limits for a Class B digital device, 
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection 
against harmful interference in a residential installation. This equipment generates, uses, and can 
radiate radio frequency energy and, if not installed and used in accordance with the instructions, 
may cause harmful interference to radio communications. However, there is no guarantee that 
interference will not occur in a particular installation. If this equipment does cause harmful 
interference to radio or television reception, which can be determined by turning the equipment 
off and on, the user is encouraged to try to correct the interference by one or more of the 
following measures: 


— Reorient or relocate the receiving antenna. 

— Increase the separation between the equipment and receiver. 

— Connect the equipment into an outlet on a circuit different from that to which the receiver is 
connected. 

— Consult the dealer or an experienced radio/TV technician for help. 


Notice to Users of the United States Telephone Network 
The following notice applies to versions of the modem that have been FCC Part 68 approved. 


This equipment complies with Part 68 of the FCC rules and the requirements adopted by the 
Administrative Council for Terminal Attachment (ACTA). On the bottom side of this equipment is a 
label that contains, among other information, a product identifier in the format 
US:AAAEQ##TXXXxX. If requested, this number must be provided to the Telephone Company. 


This equipment is intended to connect to the Public Switched Telephone Network through a 
Universal Service Order Code (USOC) type RJ11C jack. A plug and jack used to connect this 
equipment to the premises wiring and telephone network must comply with the applicable FCC 
Part 68 rules and requirements adopted by the ACTA. A compliant telephone cord and modular 
plug is provided with this product. It has been designed to be connected to a compatible modular 
jack that is also compliant. 


The Ringer Equivalence Number (REN) is used to determine the number of devices that may be 
connected to a telephone line. Excessive RENs on a telephone line may result in the devices not 
ringing in response to an incoming call. In most but not all areas, the sum of RENs should not 
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exceed five (5.0). To be certain of the number of devices that may be connected to a line, as 
determined by the total RENs, contact the local Telephone Company. 


The REN for this product is part of the product identifier that has the format US:AAAEQ##TXXXxX. 
The digits represented by ## are the REN without a decimal point. For example, 03 represents a 
REN of 0.3. 


If the modem causes harm to the telephone network, the Telephone Company will notify you in 

advance that temporary discontinuance of service may be required. But if advance notice is not 
practical, the Telephone Company will notify the customer as soon as possible. Also, you will be 
advised of your right to file a complaint with the FCC if you believe it is necessary. 


The Telephone Company may make changes in its facilities, equipment, operations or 
procedures that could affect the operation of the equipment. If this happens, the Telephone 
Company will provide advance notice in order for you to make necessary modifications to 
maintain uninterrupted service. If trouble is experienced with the modem, refer to the repair and 
warranty information in this document. 


If the equipment is causing harm to the telephone network, the Telephone Company may request 
that you disconnect the equipment until the problem is resolved. 


The user may make no repairs to the equipment. 


Connection to party line service is subject to state tariffs. Contact the state public utility 
commission, public service commission or corporation commission for information. 


If the site has specially wired alarm equipment connected to the telephone line, ensure the 
installation of the modem does not disable the alarm equipment. If you have questions about 
what will disable alarm equipment, consult your Telephone Company or a qualified installer. 


Notice to Users of the Canadian Telephone Network 


NOTICE: This equipment meets the applicable Industry Canada Terminal Equipment Technical 
Specifications. This is confirmed by the registration number. The abbreviation IC before the 
registration number signifies that registration was performed based on a Declaration of 
Conformity indicating that Industry Canada technical specifications were met. It does not imply 
that Industry Canada approved the equipment. 


NOTICE: The Ringer Equivalence Number (REN) for this terminal equipment is labelled on the 
equipment. The REN assigned to each terminal piece of equipment provides an indication of the 
maximum number of terminals allowed to be connected to a telephone interface. The termination 
on an interface may consist of any combination of devices subject only to the requirement that the 
sum of the Ringer Equivalence Numbers of all the devices does not exceed five. 


If your equipment is in need of repair, contact your local sales representative, service 
representative, or distributor directly. 


NOTICE: This Class B digital apparatus complies with Canadian ICES-003. 


Cet appareil numérique de classe B est conforme a la norme Canadienne NMB-003. 
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AACANADA - EMI NOTICE: 


This Class B digital apparatus meets all requirements of the Canadian interference-causing 
equipment regulations. 


Cet appareil numérique de la classe B respecte toutes les exigences du réglement sur le matérial 
brouilleur du Canada. 


NOTICE: This device complies with RSS-210,IC ID:8609A-1518A1NA 
Operation is subject to the following two conditions: 
1) This device may not cause interference and 


2) This device must accept any interference, including interference that may cause undesired 
operation of the device. 
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About This Guide 


This guide is intended for use by installation technicians, system administrators, and network 
administrators. It explains how to install and configure the 1511-A1, 1512-A1 and 1518-A1 
routers. 


Style and Notation Conventions 


The following conventions are used in this document to alert users to information that is 
instructional, warns of potential damage to system equipment or data, and warns of potential 
injury or death. Carefully read and follow the instructions included in this document. 


A Caution: A caution alerts users to conditions or actions that could damage equipment or data. 


wa Note: Anote provides important supplemental or amplified information. 


S, Tip: A tip provides additional information that enables users to more readily complete their tasks. 


La WARNING! A warning alerts users to conditions or actions that could lead to injury or death. 
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Typographical Conventions 


The following typographical styles are used in this guide to represent specific types of 


information. 


Bold 


Used for names of buttons, dialog boxes, icons, menus, 
profiles when placed in body text, and property pages (or 
sheets). Also used for commands, options, parameters in 
body text, and user input in body text. 


Fixed 


Used in code examples for computer output, file names, path 


names, and the contents of online files or directories. 


Fixed Bold 


Used in code examples for text typed by users. 


Fixed Bold 
Italic 


Used in code examples for variable text typed by users. 


Italic 


body text requiring special attention, section titles, 
emphasized terms, and variables. 


Used for book titles, chapter titles, file path names, notes in 


PLAIN UPPER 
CASE 


Used for environment variables. 


Command Syntax 


Brackets [ ] indicate optional syntax. 
Vertical bar | indicates the OR symbol. 


Acronyms 


The following acronyms are related to Zhone products and may appear throughout this manual: 


Table 1: Acronyms and their descriptions 


Acronym Description 

ADSL Asymmetrical Digital Subscriber Line 
AP Access Point 

ACS Auto Configuration Server 

DHCP Dynamic Host Configuration Protocol 
DSL Digital Subscriber Line 

EFM Ethernet in the First Mile 

MALC Multi-Access Line Concentrator 

MIB Management Information Bases 
NAT Network Address Translation 

NMS Network Management System 
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PVC 


Permanent Virtual Circuit 


RADIUS 


Remote Authentication Dial In User Service 


SHDSL 


Symmetric High-bit-rate Digital Subscriber Line 


SLMS 


Single Line Multi-Service 


SNMP 


Simple Network Management Protocol 


TFTP 


Trivial File Transfer Protocol 


VolP 


Voice over IP 


VPN 


Virtual Private Network 


WEP 


Wired Equivalent Privacy 


Wi-Fi 


Wireless Fidelity (IEEE 802.11 wireless networking) 


WMM 


Wi-Fi Multimedia 


WPA 


Wi-Fi Protected Access 


ZMS 


Zhone Management System 


Contacting Customer Service and Technical Support 


Customer service and technical support for this Zhone device are provided by your Internet 


Service Provider. 
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Chapter 1 


Introduction 


The1518-A1 (four port with WiFi), 1512-A1 (four port), and 1511 (one port) ADSL 2+ routers are 
easily installed routers which deliver the performance needed for multimedia applications 


This User's Guide will show you how to set up the routers, and how to customize the 
configuration to get the most out of the product. 


The 15xx-A1 family provides the following features: 


ADSL2+ modem which supports ANSI T1.413 ISSUE 2, ITU G.992.1 (G.DMT), ITU G.992.2 
(G.LITE), ITU G992.3, ITU G992.5, and ADSL2+ to meet different linking speeds from your 
ISP 


802.11 b/g WiFi LAN port (1518 only) 


Four 10/100BaseT Ethernet ports to provide Internet connectivity to all computers on your 
LAN (1518 and 1512) The 1511 has one 10/100BaseT Ethernet port 


Easy-to-use configuration program accessible through a standard web browser 


System Requirements 


In order to use your 15xx-A1 family ADSL router for Internet access, you must have the following: 


ADSL service subscription from your ISP. 

A PC with: 

= An Ethernet 10/100BaseT network interface card 

= A processor equivalent to or faster than a Pentium II 133 MHz 
= 32 MB RAM or greater 


= Windows 95b, 98, 98SE, 2000, ME, NT, XP, Vista or Windows 7. (Note: Windows 95 
requires the installation of the Winsock program, not included.) 


(Optional) An Ethernet hub or switch, if you are connecting the device to several computers 
on an Ethernet network. 


For system monitoring or configuration using the supplied web interface, a web browser such 
as Internet Explorer Version 6.0 or later. Netscape is not supported. 


Package Contents 


In addition to this document, your package should arrive containing the following: 


1518-A1, 1512-A1, or 1511-A1 ADSL 2+ router 
12V 700 mA power adapter 

RJ-11 telephone cable 

RJ-45 Ethernet cable 

User Manual / Quick Guide 


Safety Instructions 


Place your modem on a flat surface close to the cables in a location with sufficient ventilation. 
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To prevent overheating, do not obstruct the ventilation openings of the device. 


Plug the device into a surge protector to reduce the risk of damage from power surges and 
lightning strikes. 

Operate this equipment only from an electrical outlet with the correct power source as indicated 
on the adapter. 

Do not open the cover of the device. Opening the cover will void any warranties on the 
equipment. 


Unplug equipment first before cleaning. A damp cloth can be used to clean the equipment. Do not 
use liquid / aerosol cleaners or magnetic / static cleaning devices. 


Front Panel 


1518-A1 Front Panel 


\reless 
3 LAN 4 Wire 
psi Internet LAN 1 LAN 2 LAN 
Power 


1512-A1 Front Panel 


AN 3 LAN 4 
pst internet LAN 4 LAN 2 L 


1511-A1 Front Panel 
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LED descriptions 


LED Mode INDICATION 


Solid Boot-up successful 


green 
Power cold ted” -Router is bootng up 
The router may not be turned on. Check if the power adapter is 
No light connected to the modem, the modem is plugged in and the power 
switch button is in the on (pushed in) state. 
Solid Connection established. The router is able to communicate with your 
DSL ISP via ADSL 


Flashing The router is attempting to connect to your ISP 
Solid ADSL is connected 


Internet No light ADSL is not connected. The ALARM LED will be red 


Blinking The router is connected to the LAN 
Solid on Ethernet interface is successfully connected to a device through the 
LAN 1-4 green LAN port 
(1511 has A A? 
one LAN Flashing The router is sending or receiving data over Ethernet 
port) AA 
Off No LAN Link 
Solid Wireless is enabled 


Wireless No light 


(1518 only) Wireless is disabled 


Blinking Wireless traffic activity 


NOTE: The 1512 and 1511 do not have the wireless LED. The 1511 has one LAN LED. 
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Back Panel 


D SSSR 20)» 


LAN1 LAN2 LAN3 LAN4 


NOTE: The below port descriptions are listed as they appear on the back panel from left to right. 


Port Description 
DSL RJ-11 cable connects to incoming DSL line 
LAN1 — LAN4 RJ-45 connects the unit to an Ethernet device such as a PC or a 


switch. 


Restart—press the button for less than 4 seconds. 
ISP settings—press the button for 4 seconds or longer. 
Factor y Default settings — press the button for 60 seconds or 


Reset / Default 


longer 
Power Connects to a 12V 700 mA power adapter. 
Switch Power on (depressed) or power off for the router. 


NOTE: The 1512 and 1511 do not have the wireless antenna. The 1511 has one LAN port. 
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Chapter 2 Hardware Installation and PC Setup 


Overview 


This chapter provides basic instructions for connecting the router to a computer or a LAN and to 
the Internet using DSL. The first part provides instructions to set up the hardware, and the second 
part describes how to prepare your PC for use with the router. Refer to Chapter 3, Using the Web 
Interface for configuration instructions. 


It is assumed that you have already subscribed to DSL service with your telephone company or 


other Internet service provider (ISP). 


Connecting Your Hardware 


Shut down your PC before connecting the router. To connect your modem: 
1. Connect the ADSL Line 


Connect one end of an RJ-11 cable from your ADSL connection and the other end to the 
LINE port of the modem. 


2. Connect the PC to the Router 
To use the Ethernet connection, connect the Ethernet cable from the computer directly to the 


router. Connect one end of the Ethernet cable to one of the four ports labelled LAN on the 
back of the router and attach the other end to the Ethernet port of your computer. 


3. Connect the Power Adapter 


Complete the process by connecting the AC power adapter to the POWER connector on the 
back of the device and plug the adapter into a wall outlet or power strip. Then turn on and 
boot up your PC and any LAN devices, such as hubs or switches, and any computers 
connected to them. 
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Mounting the Router 


The router can be mounted on the wall with two screws. Mounting can be done on wall material 
including concrete, wood, or drywall. Select an appropriate location free from obstructions or any 
possible interference. Make sure the cables can be easily attached to the router without strain. 
The illustration below shows how to mount the router horizontally on a wall. 


NOTE: Mount the router with the cables facing up, the LEDs facing down. 


Mounting Screws 


Mounting Holes 


Concrete, Wood 
or Drywall —7 


Unit dimensions 


Model Unit Dimensions Mounting Holes 


1.30"(33 cm) high x 5.67"(144mm) wide 2 holes- 3.375" (86mm) apart 
x 4.25"(108mm) deep 


1511-A1 


1.75" (4.4cm) High x 6.56" (14.1cm) 4holes-3:25 (83mm) apart 


eA Wid o e Deep (horizontal) by 4.125" (105mm) 
" : " oles 3.25" (83mm) apart 
1518-A1 1:75" tera) High x 6.56" (14.1cm) (horizontal) by 4.125" (105mm) 


Wide x 5.125" (13cm) Deep apart (vertical) 
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Configuring Your Computer 
Prior to accessing the router through the LAN or the USB port, note the following necessary 
configurations— 


e Your PC's TCP/IP address: 192.168.1._ (the last number is any number between 2 and 
254) 


e The router's default IP address: 192.168.1.1 
e Subnet mask: 255.255.255.0 


Below are the procedures for configuring your computer. Follow the instructions for the operating 
system that you are using. 


If you used the Ethernet cable to connect your router and PC, you do not need any specific driver 
installation. 


Windows 2000 


1. In the Windows taskbar, click the Start button and point to Settings, Control Panel, and 
Network and Dial-up Connections (in that order). 


2. Click Local Area Connection. When you have the Local Area Connection Status window 
open, click Properties. 


3. Listed in the window are the installed network components. If the list includes Internet 
Protocol (TCP/IP), then the protocol has already been enabled, and you can skip to Step 
10. 


4. If Internet Protocol (TCP/IP) does not appear as an installed component, then click Install. 


5. Inthe Select Network Component Type window, click on protocol and then the Add 
button. 


6. Select Internet Protocol (TCP/IP) from the list and then click on OK. 
7. If prompted to restart your computer with the new settings, click OK. 


8. After your computer restarts, click the Network and Dial-up Connections icon again, and 
right click on the Local Area Connection icon and then select Properties. 


9. Inthe Local Area Connection Properties dialog box, select Internet Protocol (TCP/IP) 
and then click Properties. 


10. In the Internet Protocol (TCP/IP) Properties dialog box, click the radio button labelled Use 
the following IP address and type 192.168.1.x (where x is any number between 2 and 254) 
and 255.255.255.0 in the IP address field and Subnet Mask field. 


11. Click OK twice to save your changes and then close the Control Panel. 
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Windows XP 


Windows 7 


1. 


In the Windows taskbar, click the Start button and point to Settings and then click Network 
Connections. 


In the Network Connections window, right click on the Local Area Connection icon and 
click on Properties. 


Listed in the Local Area Connection window are the installed network components. Make 
sure the box for Internet Protocol (TCP/IP) is checked and then click Properties. 


In the Internet Protocol (TCP/IP) Properties dialog box, click the radio button labelled Use 
the following IP address and type 192.168.1.x (where x is any number between 2 and 254) 
and 255.255.255.0 in the IP address field and Subnet Mask field. 


Click OK twice to save your changes and then close the Control Panel. 


In the Windows taskbar, click the Start button and point to Control Panel and then click 
Network and Internet. 


In the Network and Internet window, click Network and Sharing Center. 
In the left panel click Change adapter settings. 


In the Network Connections screen, right click Local Area Connection and select 
Properties. 


Listed in the Local Area Connection window are the installed network components. Select 
Internet Protocol Version 4 (TCP/IP v4) is checked and then click Properties. 


In the Internet Protocol Version 4 (TCP/IP v4) dialog box, click the radio button labelled 
Use the following IP address and type 192.168.1.x (where x is any number between 2 and 
254) and 255.255.255.0 in the IP address field and Subnet Mask field. 


Click OK the Close to save your changes and then close the Control Panel. 
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Chapter 3 The Web User Interface 


The 15xx-A1 family of combination modem/routers have a Wide Area Network (WAN) connection 
which connects to your phone line. This connects to your Internet Service Provider (ISP) via the 
phone line. The Local Area Network (LAN) connections are where you plug in your local 
computers to the router. The 1518-A1 also has a wireless interface. The router is normally 
configured to automatically provide all the PCs on your network with Internet addresses. 


Your router may be pre-configured with your ISP configuration to ease your installation. Please 
contact your ISP if you need information on how to connect the modem to your ISP. To set up 

your router with a basic configuration required by your service provider, you can use the Quick 

Setup form the top of the navigation bar. In order for this to work, all other WAN services must 
first be removed. To remove services, from the top navigation bar select Quick Setup. 


If you connected a PC (rather than a hub or a switch) directly to the router, your LAN consists of that PC. You 
may also create connections for various protocol options by creating new connections. 


To configure your router you will first need to log in to the router. 


Note: Before configuring your router, make sure you have followed the instructions in Chapter 2 
Hardware Installation and PC Setup. You should have your PCs configured for DHCP mode (if 
your router will be), and have proxies disabled on your browser. If you see a login redirection 
screen when you access the web interface, verify that JavaScript support is enabled in your 
browser. Also, if you do not get the screen shown below, you may need to delete your temporary 
Internet files. 


Log in to the Router 


This section will explain how to log in to your router. 
1. Launch your web browser. 
2. Enter the URL htip://192.168.1.1 in the address bar and press Enter. 


A login screen like the one below will be displayed after you connect to the user interface. 


> Please type your user name and password. 


Site: 192.168.1.1 


Realm DSL Router 


User Name [ann 
Password = 


IV Save this password in your password list 


Cancel | 


3. Enter your user name and password, and then click on OK to display the user interface. 


The user name / password are admin / admin and both are case sensitive. 


Note: For security reasons you should change your password as soon as possible. 
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user / user name and password combination can display device status, but cannot change or save 
configurations. The admin / admin combination can perform all functions. Passwords can be changed at 
any time. 


y Note: There are three default user name and password combinations; Admin, Support, and User. The 


For information about password administration, see Passwords on page 103. 


Summary 


Access the general information of the router by clicking Summary under Device Info. This 
screen shows details of the router such as the version of the software, bootloader, LAN IP 
address, etc. It also displays the current status of your DSL connection as shown below. 


@@ZHONE 


Device Info Device Info 


Summary 

ca [anon Firmware: CE 
Statistics Product ID: 1518-A1 

Route Serial Number: 021018010001 


Quick Setup [Hardware Version: JREV.1.01 


Advanced Setup Software Version: 4.04L.01.A2pB026.d22f 


Wireless 


i 


[Wireless Driver Version: |5.10.120.0.cpe4.404.8 


Diagnostics 


Management ‘err A P 
8 This information reflects the current status of your WAN connection. 


Line Rate - Upstream (Kbps): 768 


[Line Rate - Downstream (Kbps): [6016 


LAN IPv4 Address: 192.168.1.1 


[mac Address: [00:02:71 :00:27:77 


Default Gateway: 151.164.184.91 
Primary DNS Server: 68.94.156.1 


[Secondary DNS Server: [68.94.157.1 
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WAN 


Display the WAN status report from the router by clicking WAN under Device Info. The graphic 
below shows the screen when a WAN connection is set up. 


@ZHONE 


Device Info WAN Info 
Summary 
Interface} Description | Type VianMuxid | Imp | NAT | Firewall Status IPv4 Address 
Statistics | pppoe_0_0_35 | PPPoE Disabled | Disabled | Enabled | Enabled | Connected | 75.36.139.126 
Route 
ARP 
DHCP 


Quick Setup 
Advanced Setup 
Wireless 


Diagnostics 


Management 


LAN Statistics 


Display LAN statistics by clicking LAN under Statistics 


@ ZHONE 


Statistics -- LAN 


Device Info 
Summary 
WAN Interface Received Transmitted 
Statistics | [Bytes [Pkts [Errs[orops [Bytes [Pkts [Errs[Drops 


WAN Service 
xTM 
xDSL 
Route 
ARP 
Quick Setup 


ENET 147899/1266/0 JO 562813/1190|0 
wlan0 JO o o jo 6045 [57 [221 JO 


Reset Statistics 


Advanced Setup 
Wireless 
Diagnostics 


Management 
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WAN Statistics 


Display WAN statistics by clicking WAN Service under Statistics. 


@ZHONE 


Device Info Statistics -- WAN 


Summar 

WAN a Interface] Description Received Transmitted 
a Bytes|Pkts|ErrsiDrops Bytes[Pkts ErrsiDrops 

Statistics pppO lbppoe_0_ o 3shozozl155| o | o faerml152[ o | o 


Reset Statistics 


DHCP 
Quick Setup 


Advanced Setup 
Wireless 
Diagnostics 


Management 


xTM Statistics 


Display ATM statistics by clicking xTM under Statistics. 


@ZHONE 


Device Info Interface Statistics 
In 
eas Port Packet | In Cell 
WAN Errors 
Errors 
Statistics 


LAN 
WAN Service 


ARP 
Quick Setup 


Advanced Setup 
Wireless 
Diagnostics 


Management 
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xDSL Statistics 


Display ADSL statistics by clicking xDSL under Statistics. Information contained in this screen is 


useful for troubleshooting and diagnostics of connection problems. 


@ ZHONE 


Device Info 


Summary 

WAN 

Statistics 
LAN 
WAN Service 
xTM 


Route 

ARP 

DHCP 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


Statistics -- xDSL 


ode: [ADSL_G.dmt! 
raffic Type: TM 
Status: Up 
Link Power State: LO 
Downstream|Upstream 


Line Coding(Trellis): lon On 
SNR Margin (0.1 dB): 158 160 


Attenuation (0.1 dB): 250 170 
Output Power (0.1 dBm): 198 119 


Attainable Rate (Kbps): 9152 1232 


Path O 
Downstream HE 


Rate (Kbps): 6016 Fe |] 


K (number of bytes in DMT frame): fi 89 
R (number of check bytes in RS code word) 14 16 
5 (RS code word size in DMT frame): E .00 8.00 


D (interleaver depth): 
Delay (msec): 16.00 16.00 
INP (DAT symbol): 2.21 .20 


Super Frames: fossas fems 
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ADSL BER Test 


The ADSL Bit Error Rate (BER) test determines the quality of the ADSL connection. The test is 

performed by transferring idle cells containing a known pattern and comparing the received data 
with this known pattern to check for any errors The BER Test reflects the ratio of error bits to the 
total number transmitted. 


If you click on the ADSL BER Test button at the bottom of the ADSL Statistics page, the following 


pop-up screen will appear allowing you to set the tested time and to begin the test. 


To run a BER test: 


1. 


2. 


ADSL BER Test - Start 

The ADSL Bit Error Rate (BER) test 
determines the quality of the ADSL 
connection. The test is done by 
transferring idle cells containing a 
known pattern and comparing the 


received data with this known pattern 
to check for any errors. 

Select the test duration below and 
click "Start". 

Tested Time 


20 Y 
(sec): 


Start | Close | 


On the bottom of the xDSL statistics page, click xDSL BER Test 
In the Tested Time (sec) drop down, select the test duration, and then click Start. 


y http://192.168.1.1/berstart.tst?berState=1 - Microsoft 1... Pal [ES 
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3. Check the results. 


2 Mozilla Firefox 


| |] http:/1192.168.1.1/berstop.tst 


ADSL BER Test - Result 


The ADSL BER test completed 


successfully. 


[Test Time (sec): | Time (sec) 


Total 
rte ferred Bits: 0x00000000067EBDOO 


[Total Error Bits: | Error Bits: [oo000000000000000 | 


Error Ratio: [o.00e+00 


Route 


(az) 


Access the routing status report from the router by clicking Route under Device Info. 


@ ZHONE 


Device Info 
Summary 
WAN 
nena 


ARP 

DHCP 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


ARP 


Device Info -- Route 


Flags: U - up, ! - reject, G - gateway, H - host, R - reinstate 
D - dynamic (redirect), M - modified (redirect). 


Destination [Gateway [subnet Mask [Flag | Metric [Service [Interface 


|151.164.184.91 | 164.184.91 E 0.0.0 255.295.209.290 UH. [0 pppoe_0_0_35|pppO 
[192.168.1.0 | [0.0.0.0 | -P 255.255.0 
0.0.0.0 151.164.184.91]|0. [0.0.0.0 | 0.0 y pppoe_0_0_35|pppO 


Display the ARP status report by clicking ARP under Device Info. 


ARP (Address Resolution Protocol) maps the IP address to the physical address, labelled HW 
Address (the MAC address) and identifies computers on the LAN. 
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DHCP 


Device Info 
Summary 
WAN 
Statistics 
Route 
ARP 

Quick Setup 

Advanced Setup 

Wireless 

Diagnostics 


Management 


IP address HW Address 
192.168.1.2 00:00:86:40:C0:34 [bro | 


Display the DHCP lease information by clicking DHCP under Device Info. 


DHCP (Dynamic Host Control Protocol) allows the modem to automatically assign IP addresses, 
to connected devices. By default, your modem is set up to assign devices addresses from 
192.168.1.2 to 192.168.1.254. 


@ ZHONE 


Device Info 
Summary 
WAN 


Statistics 


Route 
ARP 


Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


Device Info -- DHCP Leases 


MAC Address IP Address 


shoreride-lx |00:27:13:b3:b9:9b | 192.168.1.4 | 22 hours, 52 minutes, 26 seconds 


toshiba-user |00:13:02:9d:74:43 | 192.168.1.2]0 seconds 
Zos-iPodiee | d4:9a:20:34:7b:d7 | 192.168.1.3]0 seconds 


Hostname Expires In 
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Chapter 4 Quick Setup 


The Automatic Configuration feature will automatically detect the first usable PVC and 
automatically detect PPPoE, PPPOA, and Bridge Protocol (with DHCP Server available). To use 
the Automatic Configuration feature you check the Automatic Configuration option. 


wa Note: In order for the automatic configuration to work, all previously defined WAN configurations must 
be removed. 


Quick Setup with Automatic Configuration 


To enable the Automatic Configuration feature: 


1. From the navigation pane on the left select Quick Setup. 


Z ZHONE 


Device Info Quick Setup 
Quick Setup : 
I Automatic Configuration 
Advanced Setup 
Wireless ` E 
. . ATM PVC Configuration 

ERA VPI: [0-255] o 
Management 

s VCI: [32-65535] 


Encapsulation Mode: |LLC/SNAP-BRIDGING ¥ 
WAN Service Configuration 
Protocol: [PPPoE +] 


PPP Configuration 


PPP Username: | 
PPP Password: Po) 


O Use Static IP Address 


Wireless SSID 


SSID: | 


2. Entera check in the box labelled Automatic Configuration. 
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@ZHONE 


Device Info Quick Setup 


Quick Setup 


Automatic Configuration 
Advanced Setup 2 


Wireless PPP Configuration 
Diagnostics PPP Username: 
Management PPP Password: 


Wireless SSID 


SSID: [example 


Apply {Save 


3. Enter the SSID. 
4. Click Apply/Save. 


You will see a progress screen 


DSL Router Auto-connection Progress Information 
The DSL Router Auto-connect is in progress. 
DSL Router is trying PWC (0/33). 


Please wait... 


When the connection is complete you will see the Service Setup summary screen. 


Z ZHONE 


Déjese Wide Area Network (WAN) Service Setup 


Quick Setup 
Advanced Setup 


Choose Add, Remove or Edit to configure a WAN service over a selected interface. 


Wireless [Interface Description | Type [Viang021p VlanMuxld Connid] lamp | NAT [Firewall Remove | Edit 

Diagnostics 

Management atmo br_0_0_35 [Bridge | N/A N/A | N/A [Disabled | Disabled | Disabled P | Ene] 
| pppo pppoe_0_1_36| PPPoE | N/A N/A | N/A Disabled Enabled | Enabled | 6 | Edit | 


Add] Remove | 


Quick Setup with Automatic Configuration Disabled 


1. From the navigation pane on the left select Quick Setup. 
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@ZHONE 


Device Info Quick Setup 


Quick Setup 


C Automatic Configuration 
Advanced Setup 


een ATM PVC Configuration 

Diagnostics VPI: [0-255] | 

Management | 
8 VCI: [32-65535] 


Encapsulation Mode: [LUC/SNAP-BRIDGING +] 
WAN Service Configuration 


Protocol: [PPPoE +] 


PPP Configuration 


PPP Username: | 
PPP Password: | 


O Use Static IP Address 


Wireless SSID 


SSID: | 


Specify VPI and VCI as directed by your ISP. 
Select the Encapsulation Mode as directed by your ISP. 


Under WAN Service Configuration select the protocol for the WAN connection from the 
Protocol dropdown as directed by your ISP. 


Depending on the protocol selected further parameters are presented. For example, if you 
selected PPPoE or PPPOA, the PPP Username and Password option appears. 


PPPoE and PPPoA: You will need to enter the PPP username and password as provided 
by your ISP. 
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@ ZHONE 


Device Info Quick Setup 

Quick Setup C Automatic Configuration 

Advanced Setup ATM PVC Configuration 

Wireless VPI: [0-255] ik 

Diagnostics VCI: [32-65535] Es] 

Management Encapsulation Mode: [LUC/SNAP-BRIDGING E] 


WAN Service Configuration 
Protocol: [PPPoE al 


PPP Configuration 


PPP Username: [rampie 
PPP Password: peee O i] 


D Use Static IP Address 


Wireless SSID 
SSID: Jexarnple| 


Apply/save | 


For PPPoE, if desired, the DSL Router can be configured with a static IP address and 
Subnet Mask for the LAN interface to correspond to your LAN's IP Subnet. To use a 
static IP address check the Use Static IP Address option, then enter the IP Address, 
Subnet Mask, Default Gateway and DNS server. 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


Quick Setup 
FP Automatic Configuration 


ATM PVC Configuration 

VPI: [0-255] bo] 

VCI: [32-65535] Es] 

Encapsulation Mode: [LLC/SNAP-BRIDGING +] 
WAN Service Configuration 


Protocol: [PPPoE +] 


PPP Configuration 


PPP Username: example 


PPP Password: |******* 


M Use Static IP Address 

P Address: [ro2.168.5.1 CO” 
Subnet Mask: pss255.2550 
Gateway: fis2iesit ] 
DNS: [172.16.160.250. |] 


Wireless SSID 


SSID: [example 


Apply/Save 
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IPoA: For IPoA your ISP will supply information for IP Address, Subnet Mask, Default 
Gateway and DNS server. 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


Quick Setup 
D Automatic Configuration 


ATM PVC Configuration 

VPI: [0-255] BR 

VCl: [32-65535] fe] 

Encapsulation Mode: [LUCISNAP-BRIDGING 7] 
WAN Service Configuration 

Protocol: [Poa E] 


M Use Static IP Address 


IP Address: — [1s2.168.15] 
Subnet Mask: [255.255.255.0.] 
Gateway: [192.168,1.254 | 
ONS: [72.160.12.250 | 


Wireless SSID 


SSID: [example 


DHCP: With DHCP you need not set any other options. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 


Quick Setup 


Automatic Configuration 


ATM PVC Configuration 
VPI: [0-255] E] 
VCI: [32-65535] = 
Encapsulation Mode: [LLC/SNAP-BRIDGING ¥| 


WAN Service Configuration 
Protocol: [Dt i 


O Use Static IP Address 


Wireless SSID 
SSID: 
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Bridge: With the Bridge option you do not set any other options. 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


Quick Setup 
D Automatic Configuration 


ATM PVC Configuration 

VPI: [0-255] E] 

VCI: [32-65535] fo 

Encapsulation Mode: [LLC/SNAP-BRIDGING 7] 
WAN Service Configuration 

Protocol: [Bridge +] 


Wireless SSID 
SSID: [example] 


Apply/Save 


With Quick Setup the router’s wireless option is automatically set up and you will need to 


enter the SSID. 


Wireless SSID 


SSID: [example 


Click Apply/Save to save your settings. 


Upon completion the summary page will be displayed. 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 


Management 


Wide Area Network (WAN) Service Setup 


Choose Add, Remove or Edit to configure a WAN service over a selected interface. 


br_0_0_35 Disabled] O |E 
ipoad ipoa_0_3_38 N/A [Disabled | Enabled | Enabled (m Edit | 
atm3 ipoe_0_4_39 N/A [Disabled | Enabled | Enabled ob Edt] 
br_0_5 40 N/A ed|Disabled|Disabled| m |Bm 
ppp | pppoe_0_1_36 ed | Enabled | Enabled (m Edit 
Pppoal |pppoa_0_2_37 ed | Enabled | Enabled (mj Edit 


15xx-A1 Family Router Users Guide 34 


Chapter5 Advanced Setup 


This section contains advanced setup settings. To create a connection you need to define the 
Layer 2 interface and the WAN service. 


Configuration Types 


ADSL is an ATM based technology. The 15xx family of routers support Bridging and Ethernet 
over ATM (EoA) configurations and ATM based configurations: 


Bridging 

Bridging (Layer 2 MAC addressing); uses Ethernet frames. 

PPPoE 

Point to Point Protocol over Ethernet; encapsulates PPP packet in Ethernet. (RFC 2516) 
IPoE 

IP over Ethernet (Layer 3 Internet Protocol addressing in Ethernet frames) 

PPPoA 


Point to Point Protocol over ATM, encapsulates PPP frames in ATM adaption layer 5 (AAL5) 
packets. 


IPoA 
IP over ATM (Layer 3 Internet Protocol addressing in AAL5 packets 


To configure a connection, you first configure the connection type. EoA, PPPOA, or IPoA. 


1. 


Add a Layer 2 interface and select the connection type. 


EoA is used for PPPoE, IPoE and Bridge connections. PPPoA and IPoA are AAL5 based 
connections 


Set the WAN interface 


The WAN interface options to select are determined by the Layer 2 interface type. 


Add a Layer 2 Interface 


1. 


2. 


In the left hand menu pane, click Advanced Setup. 


Under Advanced Setup, click Layer2 Interface then ATM Interface, then click the Add 
button. 


In the VPI and VCI text boxes enter appropriate VPI/VCI numbers. 
VPI/VCI (Virtual Path Identifier/Virtual Circuit Identifier) values essentially define the “pipe” 
which sends data from the upstream device to the modem/router. The VPI/VCI values will be 


given to you by your ISP. 


Under Select DSL Link Type select the appropriate DSL link type: 
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5. For the EoA options you may select a connection mode: 


Default Mode: a single service over the one connection 
VLAN MUX Mode: multiple VLAN services over the one connection 


MSC Mode: multiple services over one connection. With the MSC Mode setting a single 
PVC layer 2 interface is created upon which multiple WAN services may be created 


6. From the Encapsulation Mode drop down select the appropriate option: 


For EoA options (PPPoE, IPOE, Bridge) select LLC/SNAP BRIDGING 
For PPPoA select VC/MUX 
For IPoA select LLC/SNAP ROUTING 


7. From the Service Category drop down select the type of service 


The service category selection will be provided by your ISP. The service category defines 
five classes of traffic: 


= UBR Without PCR (Unspecified Bit Rate without Peak Cell Rate) —UBR service is 
suitable for applications that can tolerate variable delays and some cell losses. 
Applications suitable for UBR service include text/data/image transfer, messaging, 
distribution, and retrieval and also for remote terminal applications such as 
telecommuting. 


= UBR With PCR (Unspecified Bit Rate with Peak Cell Rate). 
e Specify a Peak cell Rate Peak cell rate is 1-3442 (cells / sec). 


= CBR (Constant Bit Rate) —used by applications that require a fixed data rate that is 
continuously available during the connection time. It is commonly used for 
uncompressed audio and video information such as videoconferencing, interactive audio 
(telephony), audio / video distribution (e.g. television, distance learning, and pay-per- 
view), and audio / video retrieval (e.g. video-on-demand and audio library). 


e Specify a Peak cell Rate. The Peak Cell Rate is rate is 1-3442 (cells / sec). 


= Non Realtime VBR (Non-Real-time Variable Bit Rate) —can be used for data transfers 
that have critical response-time requirements such as airline reservations, banking 
transactions, and process monitoring. 


e Specify a Peak cell Rate. 1-3442 (cells / sec). 
e Sustainable Cell Rate. 1-3442 (cells / sec). 


e Maximum Burst Size. The maximum number of contiguous cells that can be sent 
at the Peak Cell Rate. 1-1000000 (cells / sec) 


= Realtime VBR (Real-time Variable Bit Rate) —used by time-sensitive applications such 
as real-time video. Rt-VBR service allows the network more flexibility than CBR. 


e Specify a Peak cell Rate. 1-3442 (cells / sec). 
e Sustainable Cell Rate. 1-3442 (cells / sec). 


e Maximum Burst Size. The maximum number of contiguous cells that can be sent 
at the Peak Cell Rate. 1-1000000 (cells / sec) 


If Quality of Service (QoS) prioritization of IP traffic is needed, select Enable IP QoS 


8. Click Apply/Save to add the appropriate WAN service 


Add a Bridge WAN Service 


1. Add an EVA Layer 2 interface as described above (Add a Layer 2 Interface). 


15xx-A1 Family Router Users Guide 36 


2. Under Advanced Setup click WAN Service then click Add. 


3. On the WAN Service Interface Configuration page, select the DSL link associated with the 
bridge interface from the drop down, then click Next 


4. On the WAN Service Configuration page, select Bridging 


5. On the WAN Service Configuration page, enter a name if you wish to customize the 
description shown for the service, then click Next. 


6. Inthe WAN Setup - Summary page, review the settings for this interface. Click Apply/Save 
to accept the settings. 


If you made a mistake on the configuration and want to make changes to it, select the 
Remove check box and click the Remove button. 


In the Wide Area Network (WAN) Service Setup page, you will see the new WAN interface 
added. 


Add a PPPoE WAN Service 
1. Add an EoA Layer 2 interface as described above (Add a Layer 2 Interface). 
2. Under Advanced Setup click WAN Service then click Add 


3. On the WAN Service Interface Configuration page, select the DSL link associated with the 
PPPOE interface from the drop down, then click Next 


4. On the WAN Service Configuration page, select PPP over Ethernet (PPPoE). 


5. On the WAN Service Configuration page, enter a name if you wish to customize the 
description shown for the service, then click Next. 


6. On the PPP Username and Password page you will need the following information: 


= PPP Username: Your account from ISP to access Internet. 
= PPP Password: The password assigned by your ISP. 


Note: If you set the username/password to default/default, the modem will redirect the user to 
a web page within the modem to change their password when they first log on. 


= PPPoE Service Name: Server name of network ISP. No need to set. 
= Authentication Method: Authentication mode of network ISP. Default is AUTO 


= Enable Fullcone NAT: RFC 3489 defines four types of Network Address Translation 
(NAT). Fullcone NAT. As with other types of NAT there is a mapping from a public IP 
address to a private IP address. The external public IP address is extended with the 
external port. With Fullcone NAT once the mapping is created any external host may 
send packets to the private IP address by sending to the external IP address and port. 
Other types of NAT have restrictions such as the sending IP address must initially have 
had packets sent from the private IP address and port regardless of the external port, or 
from the private IP address and the external port. 


Enable NAT must be checked for Fullcone NAT to be used. 
= MAC Clone: Clicking the Clone the PC MAC Address button will use the MAC address 
from the connected PC for the MAC address of the router. 


= Dial on demand: When this mode is selected, the connection that has no traffic within 
assigned disconnect timeout (e.g. 1 minute) will be automatically disconnected. The 
connection will be activated again when traffic arrives. This function is advantageous for 
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users who are charged with online time. It should be noticed that some programs 
automatically link to Internet. Computer will send data to network when infected by virus. 
Connection will not be disconnected under these data streams. 


= Inactivity Timeout: When Dial on demand is selected, this input box indicates that after 
how long the connection will be disconnected in the absence of traffic. If the value is 0, 
connection will not be disconnected. 


= MTU: the Maximum transmission unit (MTU) value may be set for your needs. Higher 
MTU can provide for a more efficient link because each packet will carry more data while 
the overhead in the packet such as header information does not get larger with the size 
of the packet. So the bulk throughput on the link will go up. Generally a large packet size 
can occupy the time on the link, so the higher MTU can increase lag time and minimum 
latency which is not appropriate for all applications. 


= Manual Connect: connect/disconnect PPPoE connection manually 


= PPP IP extension: Allows only one PC on the LAN. The public IP address assigned by 
the remote using the PPP/IPCP protocol is actually not used on the WAN PPP interface. 
Instead, it is forwarded to the PC's LAN interface through DHCP. 


Only one PC on the LAN can be connected to the remote since the DHCP server within 
the ADSL gateway has only a single IP address to assign to a LAN device. NAT and 
firewall are disabled when this option is selected. The ADSL gateway becomes the 
default gateway and DNS server to the PC through DHCP using the LAN interface IP 
address. The ADSL gateway extends the IP subnet at the remote service provider to the 
LAN PC. That is, the PC becomes a host belonging to the same IP subnet. The ADSL 
gateway bridges the IP packets between WAN and LAN ports, unless the packet is 
addressed to the gateway's LAN IP address. 


= Enable NAT: To define NAT services in the Advanced Setup | NAT screens, NAT must 
be enabled. 

= NAT Public Address (available if NAT is enabled). Automatic means the modem will 
use pubic IP addresses provided by the network; Menu IP addresses means that the 
modem will use the addresses you specify. 

= Enable Firewall: Enables Firewall. 


= Use Static IPv4 Address: Defines a static IP address (v4) which you enter in the IPv4 
Address text box which is displayed when the Use Static IPv4 Address check box is 
selected. 


= Enable PPP Debug Mode: Used to debug PPPoE issues. Use only when instructed by 
your ISP. 

= Enable KeepAlive: Enables/disables TCP keep alive packets. 

= Bridge PPPoE Frames Between WAN and Local Ports: By default the bridge PPPoE 
frame between WAN and local ports is on. This allows a PC behind the modem to be the 
PPPoE termination point. PPPoE authentication is passed on to the PC instead of to the 
router. If there are multiple PCs then, each one will have a PPPoE authentication. Note 
that this option is not applicable for PPPoA. 

= Enable IGMP Multicast Proxy: Configures the router for IGMP snooping so the router 
can keep limit multicast traffic. 


Click Next. 


On the Routing — Default Gateway page set the priority of WAN interfaces used as default 
gateways then click Next 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected Default Gateway Interfaces window. Top is the highest priority; bottom the 
lowest. 


Change the priority order by removing all items from the Selected Default Gateway 
Interfaces window by selecting them, then clicking the right arrow button. Select the items in 
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the priority order, then click the left arrow to move them into the Selected Default Gateway 
Interfaces window. 


9. On the DNS Server Configuration page set the priority of WAN interfaces to be used as 
DNS server interfaces, or specify a static DNS Primary and Secondary server, then click 
Next. 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected DNS Server Interfaces window. Top is the highest priority; bottom the lowest. 


Change the priority order by removing all items from the Selected DNS Server Interfaces 
window by selecting them, then clicking the right arrow button. Select the items in the priority 
order, then click the left arrow to move them into the Selected DNS Server Interfaces 
window. 


For a Static DNS IP Address, enter a primary and secondary DNS server for your modem, 


10. On the WAN Setup — Summary page, review your settings and click Apply/Save to accept 
the settings. To change your settings, click the Back button on the WAN Setup — Summary 
page (do not click the browser Back button). 


In the Wide Area Network (WAN) Service Setup page, you will see the new WAN interface 
added. 


Add an IPoE WAN Service 
1. Add an EVA Layer 2 interface as described above (Add a Layer 2 Interface). 
2. Under Advanced Setup click WAN Service then click Add 


3. Onthe WAN Service Interface Configuration page, select the DSL link associated with the 
IPoE interface from the drop down, then click Next 


4. On the WAN Service Configuration page, select IP over Ethernet. 


5. On the WAN Service Configuration page, enter a name if you wish to customize the 
description shown for the service, then click Next. 


6. On the WAN IP Settings page you will need to enter information provided by your ISP, then 
click Next. 


7. On the Network Address Translation Settings you will need to enter information provided 
by your ISP, then click Next. 


= Enable NAT must be checked for Fullcone NAT to be used. 


= Enable Fullcone NAT: RFC 3489 defines four types of Network Address Translation 
(NAT). Fullcone NAT. As with other types of NAT there is a mapping from a public IP 
address to a private IP address. The external public IP address is extended with the 
external port. With Fullcone NAT once the mapping is created any external host may 
send packets to the private IP address by sending to the external IP address and port. 
Other types of NAT have restrictions such as the sending IP address must initially have 
had packets sent from the private IP address and port regardless of the external port, or 
from the private IP address and the external port. 


= Enable Firewall: Enables Firewall. 


= Enable IGMP Multicast: Configures the router for IGMP snooping so the router can keep 
limit multicast traffic. 
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8. On the Routing — Default Gateway page set the priority of WAN interfaces used as default 
gateways then click Next 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected Default Gateway Interfaces window. Top is the highest priority; bottom the 
lowest. 


Change the priority order by removing all items from the Selected Default Gateway 
Interfaces window by selecting them, then clicking the right arrow button. Select the items in 
the priority order, then click the left arrow to move them into the Selected Default Gateway 
Interfaces window. 


9. On the DNS Server Configuration page set the priority of WAN interfaces to be used as 
DNS server interfaces, or specify a static DNS Primary and Secondary server, then click 
Next. 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected DNS Server Interfaces window. Top is the highest priority; bottom the lowest. 


Change the priority order by removing all items from the Selected DNS Server Interfaces 
window by selecting them, then clicking the right arrow button. Select the items in the priority 
order, then click the left arrow to move them into the Selected DNS Server Interfaces 
window. 


For a Static DNS IP Address, enter a primary and secondary DNS server for your modem, 


10. On the WAN Setup — Summary page review your settings and click Apply/Save to accept 
the settings. To change your settings, click the Back button on the WAN Setup — Summary 
page (do not click the browser Back button). 


In the Wide Area Network (WAN) Service Setup page, you will see the new WAN interface 
added. 


Add a PPPoA WAN Service 
1. Add a PPPoA Layer 2 interface as described above (Add a Layer 2 Interface). 
2. Under Advanced Setup click WAN Service then click Add 


3. On the WAN Service Interface Configuration page, select the DSL link associated with the 
PPOA interface from the drop down, then click Next 


4. On the WAN Service Configuration page, enter a name if you wish to customize the 
description shown for the service, then click Next. 


5. On the PPP Username and Password page you will need to enter information provided by 
your ISP. When you are done, click Next. 


= PPP Username: Your account from ISP to access Internet. 

= PPP Password: The password assigned by your ISP. 

«Authentication Method: Authentication mode of network ISP. Default is AUTO. 

= Enable Fullcone NAT: RFC 3489 defines four types of Network Address Translation 
(NAT). Fullcone NAT. As with other types of NAT there is a mapping from a public IP 
address to a private IP address. The external public IP address is extended with the 
external port. With Fullcone NAT once the mapping is created any external host may 
send packets to the private IP address by sending to the external IP address and port. 
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Other types of NAT have restrictions such as the sending IP address must initially have 
had packets sent from the private IP address and port regardless of the external port, or 
from the private IP address and the external port. 


Enable NAT must be checked for Fullcone NAT to be used. 


= Dial on demand: When this mode is selected, the connection that has no traffic within 
assigned disconnect timeout (e.g. 1 minute) will be automatically disconnected. The 
connection will be activated again when traffic arrives. This function is advantageous for 
users who are charged with online time. lt should be noticed that some programs 
automatically link to Internet. Computer will send data to network when infected by virus. 
Connection will not be disconnected under these data streams. 


= Inactivity Timeout: When “Dial on demand” is selected, this input box indicates that 
after how long the connection will be disconnected in the absence of traffic. If the value is 
0, connection will not be disconnected. 


= Enable manual MTU set: the Maximum transmission unit (MTU) value may be set for 
your needs. Higher MTU can provide for a more efficient link because each packet will 
carry more data while the overhead in the packet such as header information does not 
get larger with the size of the packet. So the bulk throughput on the link will go up. 
Generally a large packet size can occupy the time on the link, so the higher MTU can 
increase lag time and minimum latency which is not appropriate for all applications. 


= Manual Connect: connect/disconnect PPPoE connection manually 


= Enable NAT: To define NAT services in the Advanced Setup | NAT screens, NAT must 
be enabled. 


= Enable Firewall: Enables Firewall. 


= Use Static IPv4 Address: Defines a static IP address (v4) which you enter in the IPv4 
Address text box which is displayed when the Use Static IPv4 Address check box is 
selected. 


= Enable PPP Debug Mode: Used to debug PPPoE issues. Use only when instructed by 
your ISP. 


= Enable KeepAlive: Enables/disables TCP keep alive packets 


= Enable IGMP Multicast Proxy: Configures the router for IGMP snooping so the router 
can keep limit multicast traffic. 


On the Routing — Default Gateway page set the priority of WAN interfaces used as default 
gateways then click Next 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected Default Gateway Interfaces window. Top is the highest priority; bottom the 
lowest. 


Change the priority order by removing all items from the Selected Default Gateway 
Interfaces window by selecting them, then clicking the right arrow button. Select the items in 
the priority order, then click the left arrow to move them into the Selected Default Gateway 
Interfaces window. 


On the DNS Server Configuration page set the priority of WAN interfaces to be used as 
DNS server interfaces then click Next 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected DNS Server Interfaces window. Top is the highest priority; bottom the lowest. 


Change the priority order by removing all items from the Selected DNS Server Interfaces 
window by selecting them, then clicking the right arrow button. Select the items in the priority 
order, then click the left arrow to move them into the Selected DNS Server Interfaces 
window. 


For a Static DNS IP Address, enter a primary and secondary DNS server for your modem, 
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8. On the WAN Setup - Summary page review your settings and click Apply/Save to accept 
the settings. To change your settings, click the Back button on the WAN Setup — Summary 
page (do not click the browser Back button). 


In the Wide Area Network (WAN) Service Setup page, you will see the new WAN interface 
added. 


Add an IPoA WAN Service 
1. Add a PPPOA Layer 2 interface as described above (Add a Layer 2 Interface). 
2. Under Advanced Setup click WAN Service then click Add 


3. WAN Service Interface Configuration page, select the DSL link associated with the IPoA 
interface from the drop down, then click Next 


4. On the WAN Service Configuration page, enter a name if you wish to customize the 
description shown for the service, then click Next. 


5. On the WAN IP Settings page enter a WAN IP address and WAN subnet mask as 
instructed by your ISP, then click Next. 


6. On the Network Address Translation Settings you will need to enter information provided 
by your ISP, then click Next. 


= Enable NAT must be checked for Fullcone NAT to be used. 


= Enable Fullcone NAT: RFC 3489 defines four types of Network Address Translation 
(NAT). Fullcone NAT. As with other types of NAT there is a mapping from a public IP 
address to a private IP address. The external public IP address is extended with the 
external port. With Fullcone NAT once the mapping is created any external host may 
send packets to the private IP address by sending to the external IP address and port. 
Other types of NAT have restrictions such as the sending IP address must initially have 
had packets sent from the private IP address and port regardless of the external port, or 
from the private IP address and the external port. 


= Enable Firewall: Enables Firewall. 


= Enable IGMP Multicast: Configures the router for IGMP snooping so the router can keep 
limit multicast traffic. 


7. On the Routing — Default Gateway page set the priority of WAN interfaces used as default 
gateways then click Next 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected Default Gateway Interfaces window. Top is the highest priority; bottom the 
lowest. 


Change the priority order by removing all items from the Selected Default Gateway 
Interfaces window by selecting them, then clicking the right arrow button. Select the items in 
the priority order, then click the left arrow to move them into the Selected Default Gateway 
Interfaces window. 


8. On the DNS Server Configuration page set the priority of WAN interfaces to be used as 
DNS server interfaces then click Next 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected DNS Server Interfaces window. Top is the highest priority; bottom the lowest. 
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Change the priority order by removing all items from the Selected DNS Server Interfaces 
window by selecting them, then clicking the right arrow button. Select the items in the priority 
order, then click the left arrow to move them into the Selected DNS Server Interfaces 
window. 


9. Fora Static DNS IP Address, enter a primary and secondary DNS server for your modem, 
10. On the WAN Setup — Summary page review your settings and click Apply/Save to accept 
the settings. To change your settings, click the Back button on the WAN Setup — Summary 


page (do not click the browser Back button). 


In the Wide Area Network (WAN) Service Setup page, you will see the new WAN interface 
added. 


WAN Setup — Summary 


When the settings are complete, the next screen shows a WAN Setup — Summary screen 
displaying the WAN configurations made. 


@ ZHONE 
OO e 


Advanced Setup WAN Setup - Summary 
Layer2 Interface 
Make sure that the settings below match the settings provided by your ISP. 
ATM Interface 
WAN Service E - d 
Eikernat Meda Connection Type: [Bridge 
LAN NAT: Disabled 
NAT Full Cone NAT: Disabled 
Security Firewall: Disabled 
Parental Control IGMP Multicast: [Not Applicable 
Quality of Service Quality Of Service: [Disabled 
Routing 
DSL Click "Apply/Save" to have this interface to be effective. Click "Back" to make any 
UPnP modifications. 
DNS Proxy Back | Apply/Save 
Intarfara Graunina 


1. Make sure that the settings on the WAN Setup - Summary screen match the settings 
provided by your ISP. If all settings are correct, click the Apply/Save button to save these 
settings; if not, click Back to make any modifications (do not click the browser Back button).. 
If you want to change any item after saving, click Edit to make any modifications. 


2. Click Apply/Save to save the settings. 
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After the settings are saved, the below screen will follow displaying the WAN settings that 
you made with the option to Add or Remove any of the connections that you have made. 


@ ZHONE 


r Wide Area Network (WAN) Service Setup 
Device Info 
Quick Setup a > 7 a see 
Choose Add, Remove or Edit to configure a WAN service over a selected interface. 
Advanced Setup 
Wireless Interface | Description | Type |Vlan8021p | VlanMuxld | Connld| Igmp NAT |Firewall |Remove| Edit 
Diagnostics 
atmo br_0_0_35 | Bridge N/A N/A N/A | Disabled | Disabled | Disabled [m] Edit | 
Management 
ipoad ipoa_0_3_38 | IPoA N/A N/A N/A | Disabled] Enabled | Enabled O Edit | 
atm3 ipoe_0 4 39 PoE N/A N/A N/A [Disabled | Enabled | Enabled m| Edit | 
atm4 br_0_5 40 | Bridge /A N/A N/A | Disabled | Disabled | Disabled [m] Edit | 
pppO | pppoe_0_1_36 | PPPoE N/A YA N/A | Disabled} Enabled | Enabled |m] Edit | 
pppoal |pppoa_0_2_37 |PPPoA N/A N/A N/A | Disabled} Enabled | Enabled O Edit | 
Ada | Remove | 


Remove a Connection 


If you want to delete a connection from the listed WAN setup, click the Remove check box next to 
the connection, then click Remove. 


Edit a Connection 


If you want to modify a connection from the listed WAN setup, click the Edit button next to the 
connection. 


NOTE: Some connection settings cannot be edited after they have been created. You will need to 
delete and re-add the connection to change some settings. 


Ethernet Mode 


Ethernet mode allows you to select the speed of your Ethernet connection. Modes include—auto, 
100 full, 100 half, 10 full and 10 half. If you select auto then the router will use the common 
mode that all the connected interfaces can operate at. 


@ZHONE 


Ethernet Speed Configuration 


Device Info 
Quick Setup 
Advanced Setup Port Name | Speed Status 
Layer2 Interface ENET [auto E Auto-negotiation 


ATM Interface 
WAN Service 


Ethernet Mode 10 Half 
LAN po] 


mar 


15xx-A1 Family Router Users Guide 44 


LAN Local Area Network (LAN) Setup 


You can configure the DSL Router IP address and Subnet Mask for the LAN interface to 
correspond to your LAN's IP Subnet. .Changing the IP address here may cause your browser to 
be disconnected from the modem. You will need to set your PC to the same subnet as the 
modem's IP address to access the router again. 


IGMP snooping 
If you want the DHCP server to automatically assign IP addresses, then enable the DHCP server 
and enter the range of IP addresses that the DHCP server can assign to your computers. Disable 
the DHCP server if you would like to manually assign IP addresses. 
Default—the default LAN configuration is based on your router’s IP address. 
Static IP Lease list — you can configure the DHCP server to set aside up to 32 static IP 


addresses based on the MAC addresses of the device connected to the router by clicking on the 
add entries button. 


@ ZHONE 


DHCP Static IP Lease 


Device Info 
SHES setup Enter the Mac address and Static IP address then click "Apply/Save" . 
Advanced Setup 


Layer2 Interface 


WAN Service MAC Address: 
Ethernet Mode IP Address: 
LAN 

NAT 

Security 


Parental Control 
Quality of Service 
Routing 

DNS 

DSL 

UPnP 

DNS Proxy 
Interface Grouping 
LAN Ports 

IPSec 


To remove the Static IP address, click the check box next to the MAC address and click Remove 
Entries. 


You may be able to assign a second IP address for the modem. To do that, click the check box 
Configure the second IP Address and enter the IP address and subnet mask. 


Click the Apply/Save button to save the LAN configuration data. 
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Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 
Multicast 
Wireless 
Diagnostics 


Management 


Local Area Network (LAN) Setup 


Configure the DSL Router IP Address and Subnet Mask for LAN interface. GroupName 
Default v 


IP Address: [1az.166.1a | 
Subnet Maski [ssasaso |] 


O Enable IGMP Snooping 


O Disable DHCP Server 

O Enable DHCP Server 
Start IP Address: — [wzwse1z |] 
End IP Address: [192.168.1254 | 
Leased Time (hour):24  ] 


Static IP Lease List: (A maximum 32 entries can be configured) 


| MAC Address | IP Address [Remove 
[00:02:71:00:27:37|192.168.1.198| O 


Add Entries Remove Entries 


M Configure the second IP Address and Subnet Mask for LAN interface 
IP Address: l ] 
Subnet Mask: 


Apply/Save 


You can configure Virtual Servers, Port Triggering, and DMZ Host when NAT (Network Address 


Translation) is enabled. 


Virtual Servers 


A virtual server allows you to direct incoming traffic from the WAN side to a specific IP address on 
the LAN side. The following figure shows the screen that allows you to configure your virtual 


server(s). 


To direct incoming traffic from a service (or other server): 


Click Add to configure a virtual server. 


Either select a service (by using the Select a Service dropdown) or select a custom server 
(by entering the IP address of the server in the Custom Server text box). 
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You can select a Service or make a new one. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Virtual Servers 
Port Triggering 
DMZ Host 
ALG 
Security 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 


Multicast 
Wireless 


Diagnostics 


Management 


@ZHONE 


NAT -- Virtual Servers 

Select the service name, and enter the server IP address and click "Apply/Save" to 
forward IP packets for this service to the specified server. NOTE: The “Internal Port 
End” cannot be modified directly. Normally, it is set to the same value as "External 
Port End”. However, if you modify “Internal Port Start", then “Internal Port End” 
will be set to the same value as “Internal Port Start”. 

Remaining number of entries that can be configured:32 

Use Interface 


[pppoe_0_5_80/ppp0 al 
Service Name: 


© Select a Service: [Select One El 
© Custom Service: | 


Server IP Address: fise.t68.1. 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Virtual Servers 
Port Triggering 
DMZ Host 
ALG 
Security 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 


Multicast 
Wireless 


Diagnostics 
Management 


NAT -- Virtual Servers 

Select the service name, and enter the server IP address and click "Apply/ Save" to 
forward IP packets for this service to the specified server. NOTE: The “Internal Port 
End" cannot be modified directly. Normally, it is set to the same value as “External 
Port End”. However, if you modify “Internal Port Start”, then “Internal Port End” will 
be set to the same value as “Internal Port Start”. 

Remaining number of entries that can be configured:32 


Use Interface pppoe_0_1_36/ppp0 +] 
Service Name: 


© Select a Service: 


© Custom Service: 
Server IP Address: [192.168.1. | 


roto dones Port Startlinternal Port End 


6901 jeso 6901 
1963 164 | MEE] 1963 
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Enter the IP address of the LAN side PC in the Server IP Address text box. 
Click Save / Apply to submit the configuration. 
The NAT - Virtual Servers Setup screen appears after you save your selection. To add 


additional virtual servers, click Add. If you need to remove any of the server names, select 
the check box for the item and click Remove. 


Z ZHONE 


Device Info NAT -- Virtual Servers Setup 
Quick Setup 
Advanced Setup Virtual Server allows you to direct incoming traffic from WAN side (identified by Protocol 
Layer2 Interface and External port) to the Internal server with private IP address on the LAN side. The 
WAI Seal Internal port is required only if the external port needs to be converted to a different port 
ervice number used by the server on the LAN side. A maximum 32 entries can be configured. 
Ethernet Mode 
LAN Add | Remove | 
NAT 
Virtual ed ere External | External Internal | Internal Server IP | WAN 
Port Triggering Port Port Protocol | Port Port Remove 
Name Address Interface 
DMZ Host Start End Start |End 
ALG Age of 
Security Empires 
Parental Control =a aii 47624 47624 TCP 47624 |47624 |192.168.5.1 | pppd FP 
The Rise 
lity of Servi 
Quality of Service Rome 
Routing 
DNS Age of 
DSi Empires 
Expansion: TCP 6073 6073 192.168.5.1 | pppO Oo 
UPnP The Rise 
DNS Proxy of Rome 
p Lu P ea | 
Interface Grouping Age of 
LAN Ports Empires 
IPSec Expansion: TCP 2300 2400 192.168.5.1 | pppO r 
Certificate The Rise 
of Rome 
Multicast 
Wireless Age of 
Diagnostics empires 
Management Expansion UDP 2300 2400 192.168.5.1 | ppp F 
The Rise 
of Rome 
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Port Triggering 


Click Add to add Port Triggering to your Internet application. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Virtual Servers 
Port Triggering 
DMZ Host 
ALG 
Security 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
i Interface Grouping 
LAN Ports 
IPSec 
Certificate 
Multicast 


mi 


NAT -- Port Triggering 


Some applications such as games, video conferencing, remote access applications and 
others require that specific ports in the Router's firewall be opened for access by the 
applications. You can configure the port settings from this screen by selecting an existing 
application or creating your own (Custom applicationjand click "Save/ Apply" to add it. 
Remaining number of entries that can be configured:32 


Use Interface pppoe_0_5_80/pppD al 


Application Name: 
€ Select an application: | 
© Custom application: 


Save/Apply 
Trigger Port Trigger Port Trigger Open Port Open Port Open 
Start End Protocol Start End Protocol 


í 
[e] 
U 
4 


TTT 
iii 


TCP + TCP he 


4 
[e] 
U 
4 
4 
[e] 
U 
4 


4 
O 
U 
4 
4 
[e] 
TU 
4 


TP E 


TTT 
TTT 
i 
TTT] 


Save/Apply 


The NAT - Port Triggering screen appears when you click Add allowing you to select the 
application that you want to set the port settings for. After a selection has been made, click Save / 


Apply to save your settings. 


The NAT - Port Triggering Setup screen appears after you save your selections. You will be 
able to add or remove selections made by clicking on the Add and Remove buttons. 
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DMZ Host 


Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 

NAT 


Virtual Servers 


Port Triggering 
DMZ Host 
ALG 
Security 
Parental Control 
Quality of Service 
Routing 
DSL 
UPnP 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Virtual Servers 
Port Triggering 
DMZ Host 
ALG 


NAT -- Port Triggering Setup 


Some applications require that specific ports in the Router's firewall be opened for access 
by the remote parties. Port Trigger dynamically opens up the 'Open Ports' in the firewall 
when an application on the LAN initiates a TCP/UDP connection to a remote party using 
the ‘Triggering Ports'. The Router allows the remote party from the WAN side to establish 
new connections back to the application on the LAN side using the 'Open Ports’. A 
maximum 32 entries can be configured. 


Application Name Port [Port Range | Port [Port Range | WAN Interface | Remove 
da E Protocol 


You can define the IP address of the DMZ Host on this screen. Enter the IP address and click 
Save / Apply. 


Z ZHONE 


NAT -- DMZ Host 


The DSL router will forward IP packets from the WAN that do not belong to any of the 
applications configured in the Virtual Servers table to the DMZ host computer. 


Enter the computer's IP address and click 'Apply' to activate the DMZ host. 
Clear the IP address field and click ‘Apply’ to deactivate the DMZ host. 


DMZ Host IP 
Address: 


ME 
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Security 


ALG, Application Layer Gateway can be used to allow firewall traversal with SIP. To enable voice 
packets to successfully pass through firewalls and NAT, click on the SIP enabled checkbox. 


@ ZHONE 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 


ALG 


Select the ALG below. 


M SIP Enabled 


Save/Apply | 


For security reasons, firewall options can be configured only from the LAN side of the router. 


IP Filtering—Outgoing 


Outgoing IP filters block LAN traffic from entering the WAN side. The Outgoing IP Filtering 
Setup screen will show all outgoing IP filters. Click Add to create filters. 
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Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
IP Filtering 


Outgoing IP Filtering Setup 


By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be 
BLOCKED by setting up filters. 


Choose Add or Remove to configure outgoing IP filters. 


Filter 
Name 


IP 
Version 


SrclP/ 
PrefixLength 


Add | Remove | 


DstIP/ 


Protocol 
rotoco PrefixLength 


SrcPort DstPort | Remove 


The Add IP Filter -- Outgoing screen will appear. Add the filter name, source information (from 
the LAN side), and destination information (from the WAN side). Then click Save / Apply. 


15xx-A1 Family Router Users Guide 51 


@@ZHONE 


Add IP Filter -- Outgoing 


Device Info 
Quick Setup 
Advanced Setup 


The screen allows you to create a filter rule to identify outgoing IP traffic by specifying a 
new filter name and at least one condition below. All of the specified conditions in this 
Layer2 Interface filter rule must be satisfied for the rule to take effect. Click 'Apply/Save' to save and 
WAN Service activate the filter. 


Ethernet Mode 


LAN Filter Name: | 


NAT IP Version: IPv4 X 


Security Protocol: [ y 
IP Filtering Source IP address[/prefix length]: [>] 
Outgoing Source Port (port or port:port): | 
Incoming Destination IP address[/prefix tenth: ~~ 
MAC Filtering Destination Port (port or port:port): L V] 


Parental Control 


Quality of Service 


Apply/Save 


Routing 
When you Save / Apply the IP filter, the Outgoing IP Filtering Setup screen appears. The 
Outgoing IP Filtering Setup screen lists the outgoing IP filters, including filters which were 
added from the previous screen. 


You can view, add or delete outgoing filters. The Remove button appears only when you have an 
existing IP filter already set up. 
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Outgoing IP Filtering Setup 


Device Info 
Quick Setup By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be BLOCKED by setting up filters. 
Advanced Setup 
Layer2 Interface Choose Add or Remove to configure outgoing IP filters. 
WAN Service 


Ethernet Mode Filter Name | IP Version | Protocol 


SrelP/ PrefixLength SrePort | DstIP/ PrefixLength [DstPort [Remove 


LAN Secure 4 TCP or UDP | 172.14.232.1 [172.15.12.1 | | 
NAT 


Security Add 
IP Filtering 


Outgoing 
Incoming 
MAC Filtering 
Parental Control 
Quality of Service — 

Routing 
DNS 

DSL 

UPnP 

DNS Proxy 


IP Filtering—Incoming 


Incoming IP filter filters the WAN traffic to the LAN side. Click Add to add incoming filter settings. 
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Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
IP Filtering 
Outgoing 
Incoming 


Incoming IP Filtering Setup 


When the firewall is enabled on a WAN or LAN interface, all incoming IP traffic is 
BLOCKED. However, some IP traffic can be ACCEPTED by setting up filters. 


Choose Add or Remove to configure incoming IP filters. 


citer Interfaces vi Protocol OPY SrcPort RNP DstPort | Remove 
Name Version PrefixLength PrefixLength 


Add| Remove | 


Enter a filter name, information about the source address (from the WAN side), and information 
about the destination address (to the LAN side). Select the protocol and WAN interface, then click 
Save/Apply to add the setting. 


You can view and delete the incoming filter settings in the Add Ip Filter -- Incoming screen. 
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Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
IP Filtering 
Outgoing 
Incoming 
MAC Filtering 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 


Add IP Filter -- Incoming 


The screen allows you to create a filter rule to identify incoming IP traffic by specifying a 
new filter name and at least one condition below. All of the specified conditions in this 
filter rule must be satisfied for the rule to take effect. Click 'Apply/Save' to save and 
activate the filter. 


Filter Name: | 
IP Version: IPv4 y 
Protocol: | +] 


Source IP address[/ prefix length]: | 

Source Port (port or port:port): o 
Destination IP address[/prefix length.” 
Destination Port (port or port:port): as 


WAN Interfaces (Configured in Routing mode and with firewall enabled) and LAN 
Interfaces 

Select one or more WAN/LAN interfaces displayed below to apply this rule. 

M Select All 

M pppoe_0_5_80/pppd 


M bro/bro 
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When you Save / Apply the IP filter, the Incoming IP Filtering Setup screen appears. The 
Incoming IP Filtering Setup screen lists the incoming IP filters, including filters which were 
added from the previous screen. 


You can view, add or delete incoming filters. The Remove button appears only when you have an 
existing IP filter already set up. 
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Incoming IP Filtering Setup 


Device Info 


Quick Setup When the firewall is enabled on a WAN or LAN interface, all incoming IP traffic is BLOCKED. However, some IP traffic can be ACCEPTED by setting up 


Advanced Setup 


filters. 
Layer2 Interface 
WAN Service Choose Add or Remove to configure incoming IP filters. 
Ethernet Mode 
LAN Filter Name | Interfaces ||P Version | Protocol |SrclP/ PrefixLength | SrcPort | DstIP/ PrefixLength | DstPort | Remove 
NAT InFilter pppoad, bro |4 TCP 192.168.1.99 192.168.1.20 o 
Security 
IP Filtering 
Outgoing 
Incoming 


MAC Filtering 
Parental Control 
Quality of Service — 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
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MAC Filtering 


MAC filtering can forward or block traffic by MAC address. You can change the policy or add 
settings to the MAC filtering table in the MAC Filtering Setup screen. 
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Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
IP Filtering 
MAC Filtering 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 


Interface Grouping 
LAN Ports 

| IPSec 
Certificate 
Multicast 


ba 


MAC Filtering Setup 


MAC Filtering is only effective on ATM PVCs configured in Bridge mode. FORWARDED 
means that all MAC layer frames will be FORWARDED except those matching with any of 
the specified rules in the following table. BLOCKED means that all MAC layer frames will 
be BLOCKED except those matching with any of the specified rules in the following 
table. 

MAC Filtering Policy For Each Interface: 

WARNING: Changing from one policy to another of an interface will cause all defined 
rules for that interface to be REMOVED AUTOMATICALLY! You will need to create 
new rules for the new policy. 


Interface | Policy Change 


atmo FORWARD O 


atrm1 FORWARD O 


atm2 FORWARD E 


Change Policy | 


Choose Add or Remove to configure MAC filtering rules. 


Destination MAC [Source MAC | Frame Direction Remove] 


Add | Remave | 


[Interface Protocol 


To add a setting to the MAC filtering table, then click Add to access the Add MAC Filter screen, 
then configure the MAC filter. 


e Protocol type: Type of protocol to filter. 


PPPoE 
IPv4 
IPv6 


IPX 
NetBEUI 
IGMP 


AppleTalk 


e Destination MAC Address: the destination MAC address you want to filter 


e Source MAC Address: define the source MAC address 


e Frame Direction: You can define the direction of the filter. Options are 


e LAN TO WAN and WAN TO LAN 


e WAN to LAN 
e LAN to WAN 
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e WAN Interfaces: defines the WAN interface for this filter. This drop down list will show all 
the available WAN interfaces. 


Click Save/Apply to save the MAC filter. 


1518-Alzox 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
IP Filtering 
MAC Filtering 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 


Certificate 


@ ZHONE 


Add MAC Filter 


Create a filter to identify the MAC layer frames by specifying at least one condition below. If multiple 
conditions are specified, all of them take effect. Click "Apply" to save and activate the filter. 


Protocol Type: 
Destination MAC 
Address: 

Source MAC Address: 


Frame Direction: 


[NetBEUI 


20:20:12:06:25:34 | 


[20:20:32:B0:03:21 | 


v 


LAN<=>\WAN x] 


WAN Interfaces (Configured in Bridge mode only) 


br_0_1_35/atm1 v 


Save/Apply 


When you Save / Apply the IP filter, the MAC Filtering Setup screen appears. The MAC 
Filtering Setup screen lists the MAC filters, including filters which were added from the previous 


screen. 


You can view, add or delete MAC filters. The Remove button appears only when you have an 
existing IP filter already set up. 
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Device Info 


Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
IP Filtering 
MAC Filtering 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 


Parental Control 


Use the Parental Control feature to restrict the days and times a particular device is allowed to 
access the Internet. 


Time Restriction 


To setup parental controls: 


MAC Filtering Setup 


MAC Filtering is only effective on ATM PVCs configured in Bridge mode. FORWARDED means that all 
MAC layer frames will be FORWARDED except those matching with any of the specified rules in the 
following table. BLOCKED means that all MAC layer frames will be BLOCKED except those matching 
with any of the specified rules in the following table. 


MAC Filtering Policy For Each Interface: 


WARNING: Changing from one policy to another of an interface will cause all defined rules for 
that interface to be REMOVED AUTOMATICALLY! You will need to create new rules for the new 


policy. 
Interface | Policy Change 


atm1 FORWARD| O 


Change Policy 


Choose Add or Remove to configure MAC filtering rules. 


Interface | Protocol | Destination MAC | Source MAC Frame Direction | Remove 
atm1 NetBeui |20:20:12:06:25:34 | 20:20:32:B0:03:21 | BOTH O 


Click Add to set up the restrictions. 


@ ZHONE 
A 


WAN Service 


Ethernet Mode 


LAN 
NAT 
Security 


Parental Control 


Time Restriction 


Access Time Restriction -- A maximum 16 entries can be configured. 


The Add Parental Control screen appears. 
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URL Filter 


WAN Service 

Ethernet Mode 

LAN 

NAT 

Security 

Parental Control 
Time Restriction 
Url Filter 


@ ZHONE 
ERA 


Access Time Restriction 


This page adds time of day restriction to a special LAN device connected to the Router. 
The 'Browser's MAC Address' automatically displays the MAC address of the LAN device 
where the browser is running. To restrict other LAN device, click the "Other MAC Address" 
button and enter the MAC address of the other LAN device. To find out the MAC address 
of a Windows based PC, go to command window and type "ipconfig fall”. 


Quality of Service Pane | 
Routing © Browser's MAC DO 
DSL Address 
UPnP C Other MAC Address CT 
DNS Proxy (XK EX ERK XK EKER) 
Interface Grouping 
LAN Ports Days of the week Mon|TuelWed|ThulFri [Sat/Sun 
Click to select DO] 0 |b |joOyojo 
IPSec 
diia Start Blocking Time EJ 
Multicast (hh:mm) 
Wireless End Blocking Time (hh:mm) | 
Diagnostics Apply/Save | 


2. Enter a User Name to identify the target of the restrictions. . This is equivalent to the host 
name of the IP clients (refer to the DHCP status screen check to see the host names) 


3. Enter the MAC address of the network adapter to be restricted, and, optionally, another MAC 
address. 


4. Select the days of the week the restriction is in force. 


5. Specify the start and end times the restriction is in force. Use the form hh:mm, where 23:59, 
for example, is one minute before midnight. 


6. Click Save / Apply to save the settings and to continue. 


Access to websites can be blocked by creating a URL filter. Two types of lists can be created, 
either an exclude or include list. 


1. Select the Exclude button or Include button to specify the web sites you want to block or 
allow access. 


2. Click Add to continue to the next screen to enter the URL address. 
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@ZHONE 


WAN Service 

Ethernet Mode 

LAN 

NAT 

Security 

Parental Control 
Time Restriction 
Url Filter 

Quality of Service 

Routing 


9 


URL Filter -- Please select the list type first then configure the list entries. Maximum 
100 entries can be configured. 


URL List Type: © Exclude © Include 


Add | Remove | 


In URL Address enter the URL address; in Port Number enter the port number and click 
Save / Apply. 


If no port number is entered, the default 80 port will be applied. Continue this process until all 
the necessary websites are entered. 
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WAN Service 

Ethernet Mode 

LAN 

NAT 

Security 

Parental Control 
Time Restriction 
Url Filter 

Quality of Service 

Routing 

DSI 


Parental Control -- URL Filter Add 


Enter the URL address and port number then click "Apply? Save" to add the entry to the 
URL filter. 


URL Address: | 
Port Number: | (Default 80 will be applied if leave blank.) 
Apply/Save 
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Quality of Service 
You can configure the Quality of Service to apply different priorities to traffic on the router. 


Queue Config 
In the QoS -- Queue Management Configuration page you can enable a queue for a network 


interface. Each interface associated with QoS is allocated three queues. Lower Queue 
Precedence values denote a higher priority for the queue, so “1” has higher priority than “2.” 


@ ZHONE 
ERA AAAAÓKÁÓÁA 


WAN Service QoS -- Queue Management Configuration 

Ethernet Mode 

LAN If Enable QoS checkbox is selected, choose a default DSCP mark to automatically mark 

NAT incoming traffic without reference to a particular classifier. Click 'Apply/Save' button to 
save it. 

Security 


Bapactal Control Note: If Enable Qos checkbox is not selected, all QoS will be disabled for all 


Quality of Service enero 
Queue Config Note: The default DSCP mark is used to mark all egress packets that do not match any 
QoS Classification classification rules. 

Routing 

DSL C Enable QoS 

UPnP 

DNS Proxy sail dias 


To enable QoS: 
1. From the Quality of Services page, check Enable QoS. 
2. From the Select Default DSCP Mark drop down select the option as directed by your ISP. 


Differentiated Services Code Point (DSCP) is a means to classify packets in the IP header of 
the packet. 


To associate an interface with QoS: 
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From the Queue Config page, click Add. 


@ ZHONE 
oo o 


WAN Service QoS Queue Setup 
Ethernet Mode 
LAN In ATM mode, maximum 8 queues can be configured. 


For each Ethernet interface, maximum 4 queues can be configured. 


MAT If you disable WAM function in Wireless Page, queues related to wireless will not take 
Security effects 

Parental Control 

Quality of Service The QoS function has been disabled. Queues would not take effects. 


Queue Config 


QoS Classification Name | Key | Interface | Scheduler Alg | Precedence | DSL Latency | Enable | Remove 


Routing 


DSL Add] Enable | Remove | 


In the QoS Queue Configuration page enter the name of the queue and enable the queue 
by selecting Enable from the Queue Configuration Status drop down. 


@ ZHONE 
Ss 


WAN Service QoS Queue Configuration 
Ethernet Mode 
LAN This screen allows you to configure a QoS queue and assign it to a specific layer2 


interface. The scheduler algorithm is defined by the layer2 interface. 


EAT . Note: For SP scheduling, queues assigned to the same layer2 interface shall have 
Security unique precedence. Lower precedence value implies higher priority for this queue 
Parental Control relative to others 
Quality of Service Click 'Apply/Save' to save and activate the queue. 
Queue Config 
Qos Classification Name: 
Routing Enable: [Disable =] 
DSL 
UPnP Interface: | +] 
DNS Proxy 
Interface Grouping | Apply/Save 


Select the interface from the Interface drop down. 
Set the priority for the queue from the Precedence drop down 


Click Save/Apply. 
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QoS Classification 


You can configure the Quality of Service to apply different priorities to traffic on the router. 
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AA AAA 


WAN Service 
Ethernet Mode 
LAN 

NAT 

Security 

Parental Control 
Quality of Service 


QoS Classification Setup -- A maximum 32 entries can be configured. 


Choose Add or Remove to configure network traffic classes. 
If you disable WAW function in Wireless Page, classification related to wireless will not 
take effects 


The QoS function has been disabled. Classification rules would not take effects. 


Queue Config CLASSIFICATION CRITERIA CLASSIFICATION RESULTS 
os aan 

mee CI Class |. /.,[Class|Ether [SroMAC/ [DstMAC? |SrelPy DstiP/ protolsrePort|DstPort OCP, [802.1P[Queue|oscr|802.1P [Vario a a Seen 
Routing Name Intf [Type |Mask Mask PrefixLength |PrefixLength fas Check[Check |Key [Mark |Mark [Tag en = 
DSL (kbps) 
mene Add able | Remove 

En. 

DNS Proxy 


The Add Network Traffic Class Rule screen allows you to add a network traffic class rule. 


To add a rule: 


1. 
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In the Quality of Service—QoS Classification screen, click Add. 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 


Queue Config 


QoS Classification 
Routing 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 
Multicast 

Wireless 


Diagnostics 


2. 


3. 


yl 


Add Network Traffic Class Rule 
The screen creates a traffic class rule to classify the upstream traffic, assign queue which 
defines the precedence and the interface and optionally overwrite the IP header DSCP 

byte. A rule consists of a class name and at least one condition below. All of the specified 
conditions in this classification rule must be satisfied for the rule to take effect. Click 
'Save/Apply' to save and activate the rule. 


Traffic Class Name: 
Rule Order: 
Rule Status: 


Specify Classification Criteria 
A blank criterion indicates it is not used for classification. 


Class Interface: 


Ether Type: 


| 


[Lost y] 
[Disable +] 


ja 


Source MAC Address: 
Source MAC Mask: 
Destination MAC Address: 
Destination MAC Mask: 


Specify Classification Results 
Must select a classification queue. A blank mark or tag value means no change. 


Assign Classification Queue: 

Mark Differentiated Service Code Point (DSCP): 
Mark 802.1p priority: 

Tag VLAN ID [0-4094]: 


Assign a priority level—low, medium, and high—to this traffic class. 


In the Add Network Traffic Class Rule screen give a name to this traffic class. 
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4. Select an IP precedence from the 0-7 range. 
5. Enter an IP Type of Service from the following selections— 


e Normal Service 

e Minimize Cost 

e Maximize Reliability 
e Maximize Throughput 
e Minimize Delay 


6. Enter the traffic conditions for the class such as the protocol (TCP / UDP, TCP, UDP, or 
ICMP) to be used. 


7. Click Save / Apply to save the settings. 


Routing 
Under the Routing heading you assign a default gateway, create a routing table (in Static Route), 
create routing policy rules, and activate Routing Information Protocol (RIP) on the device. 
Default Gateway 


You can enable an automatic assigned default gateway on the Routing — Default Gateway 
screen or specify a static default gateway. By default, the Enable Automatic Assigned Default 
Gateway checkbox is checked. 
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Routing -- Default Gateway 


Device Info 
Quick Setup 


Advanced Setup Default gateway interface list can have multiple WAN interfaces served as system default gateways but 


Layer2 Interface 

WAN Service 

Ethernet Mode 

LAN 

NAT 

Security 

Parental Control 

Quality of Service 

Routing 
Default Gateway 
Static Route 
Policy Routing 
RIP 

DNS 

DSL 

UPnP 

DNS Proxy 

Interface Grouping 

LAN Ports 

IPSec 


Cartificata 


only one will be used according to the priority with the first being the highest and the last one the 
lowest priority if the WAN interface is connected. Priority order can be changed by removing all and 
adding them back in again. 


O Select Default Gateway Interfaces from available WAN interfaces 
Selected Default 
Gateway Interfaces 


Available Routed 
WAN Interfaces 


a 
LJ 


© Use the following Static default gateway IP address 
Default gateway ip address: 


To enable Automatic Assigned Default Gateway leave the checkbox checked. To disable 
Automatic Assigned Default Gateway uncheck the checkbox. 
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If you change the automatic assigned default gateway address, you must reboot the router to be 
assigned a new default gateway IP address. 
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Routing -- Default Gateway 


Device Info 
Quick Setup 


Advanced Setup Default gateway interface list can have multiple WAN interfaces served as system default 


Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 

NAT 

Security 


Parental Control 


gateways but only one will be used according to the priority with the first being the highest 
and the last one the lowest priority if the WAN interface is connected. Priority order can be 
changed by removing all and adding them back in again. 


© Select Default Gateway Interfaces from available WAN interfaces: 
Selected Default 
Gateway Interfaces 


Available Routed 
WAN Interfaces 


Quality of Service 
Routing pppo 
Default Gateway 
Static Route [>] 
Policy Routing 
RIP 
DNS 
DSL 
UPnP O Use the following Static default gateway IP address: 
DNS Proxy Eo] 
Interface Grouping 
LAN Ports 
IPSec 


Certificate 


Default gateway ip address: 


Static Route 


To add a routing table use the Static Route page. A maximum of 32 entries can be configured. 


1. Click Add. 
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Routing -- Static Route (A maximum 32 entries can be configured) 


Ada | Remove | 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 


2. Enter the route information and then click Apply/Save. 
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Routing -- Static Route Add 


Device Info 
Quick Setup 


Enter the destination network address, subnet mask, gateway AND/OR available WAN 
Advanced Setup 


interface then click "Apply/Save" to add the entry to the routing table. 
Layer2 Interface 


WAN Service 
Ethernet Mode IP Version: IPv4 Ad 
LAN Destination IP address/ prefix length: | 
Interface: | +] 
NAT 
Gateway IP Address: | 
Security 
Parental Control (optional: metric number should be greater than or equal to zero) 
Quality of Service Metric: | 
Routing Apply/Save 


Default Gateway 


Policy Route 


The policy routing feature allows the administrator to have more control over how packets should 
flow through the modem and into their networks. The feature allows administrator to route IP 
packets according to their Source Interface; Source/Destination IP address/subnets; IP Protocols; 
Source/Destination Ports to specific Gateway address and/or Gateway Interfaces. 
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Policy Routing Setting -- A maximum 8 entries can be configured. 


Device Info 
Quick Setup 
Advanced Setup - 7 
Policy Name | Source ip [LAN Port | WAN | Default GW | Remove 
Layer2 Interface 


WAN Service Ada Rai | 


Ethernet Mode 


To add a policy routing rule: 


1. Click Add. 
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RIP 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
Default Gateway 


Statice Danta 


Policy Routing Settup 

Enter the policy name, policies, and WAN interface then click "Save/Apply" to add the 
entry to the policy routing table. 

Note: If selected "MER" as WAN interface, default gateway must be configured. 


Policy Name;| 
Physical LAN Port: | +] 


Source iP:] 


Use Interface] y] 


Default Gateway] 
Save/Apply | 


2. Enter a unique name for the rule in the Policy Name text box. 


3. Select the interface to associate with the rule from the Use Interface drop down 


4. Select the appropriate protocol and define other parameters for the routing rule: 


5. Click Save/Apply. 


Source and/or Destination address and/or Subnet Mask 
UDP/TCP Source or Destination port. 
Gateway address or Interface (These can be Active PVCs or Port Mapping Groups) 


To enable RIP on an interface, open the Routing — RIP Configuration page. 
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Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
Default Gateway 
Static Route 
Policy Routing 
RIP 


Routing -- RIP Configuration 


NOTE: RIP CANNOT BE CONFIGURED on the WAN interface which is PPP or has NAT enabled 


To activate RIP for the WAN Interface, select the desired RIP version and operation and place a check 
in the 'Enabled' checkbox. To stop RIP on the WAN Interface, uncheck the ‘Enabled’ checkbox. Click 
the 'Apply/Save' button to star/stop RIP and save the configuration. 


Interface] Version | Operation [Enabled 
vedy] 


Apply/Save 


Enter the RIP configuration and then click Apply/Save. 
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DNS 


The DNS Server Configuration configures the DNS server settings for your router. 


If multiple WAN interfaces are configured, you can define the priority by their position in the 
Selected DNS Server Interfaces window. Top is the highest priority; bottom the lowest. 


Change the priority order by removing all items from the Selected DNS Server Interfaces 
window by selecting them, then clicking the right arrow button. Select the items in the priority 
order, then click the left arrow to move them into the Selected DNS Server Interfaces window. 


For a Static DNS IP Address, enter a primary and secondary DNS server for your router. 


After you have configured the DNS settings, click Apply / Save. 


@ ZHONE 


Quick Setup DNS Server Configuration 


Advanced Setup 3 F 
Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In 
Layer2 Interface 


WAN Service 
Ethernet Mode 
LAN 

NAT 

Security 
Parental Control 


ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be 
entered. 

DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used 
according to the priority with the first being the higest and the last one the lowest priority if the WAN interface is 
connected. Priority order can be changed by removing all and adding them back in again. 


O Select DNS Server Interface from available WAN interfaces 


Quality of Service Selected DNS Server Available WAN 
Routing Interfaces Interfaces 
DNS . 

DNS Server Pa | 


| 
Dynamic DNS 


DSL =] 
UPnP E 
DNS Proxy 
Interface Grouping 
LAN Ports 

IPSec © Use the following Static DNS IP address 
Certificate Primary DNS server: ] 
Multicast Secondary DNS server: ] 


Wireless 


Diagnostics 


Dynamic DNS 
This screen allows you to enable dynamic DNS service. 


To configure the DDNS, select the DDNS provider from the drop down list and enter the 
information provided by the DDNS . 
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DSL 


@ ZHONE 


Device E A 


Quick Setup Add Dynamic DNS 


Advanced Setup 
Layer2 Interface 
WAN Service 


Ethernet Mode D-DNS provider 
LAN 
NAT Hostname 

, Interface 
Security 


Parental Control 


DynDNS Settings 


Quality of Service Username 
Routing Password 


DNS 
DNS Server = 
Dynamic DNS 

DSL 

UPnP 

DNS Proxy 

Interface Grouping 

LAN Ports 

IPSec 


This page allows you to add a Dynamic DNS address from DynDNS.org or TZO. 


| DynDNS.org J| 


pppoe_0_0_35/ppp0 v 


Apply /Save 


The DSL settings page contains sections—modulation and capability—that should be specified 
by your ISP. Consult with your ISP to select the correct settings for each. 


Click on Save / Apply if you are finished or click on Advanced Settings if you want to configure 


more advanced settings. 


@ ZHONE 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 


Quality of Service 


DSL Settings 


M G.Dmt Enabled 
M G.lite Enabled 

M 71.413 Enabled 
M ADSL2 Enabled 

M AnnexL Enabled 
M ADSL2+ Enabled 
D Annex Enabled 


Routing Capability 

DSL M Bitswap Enable 
UPnP M SRA Enable 
DNS Proxy 


Interface Grouping 


Select the modulation below. 


Apply/save Advanced Settings | 
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Modulation Methods 


Capability 


The following modulation methods are supported by the 3218 ADSL router: 


e G.dmt Enabled 

e Gite Enabled 

e 71.413 Enabled 
e ADSL Enabled 

e Annex L Enabled 
e ADSL2+ Enabled 
e AnnexM Enabled 


Do not change this setting unless so directed by your ISP. 


The following are included under Capability: 


e Bitswap Enable 
e SRA (Seamless Rate Adaptation) Enable 


Do not change these settings unless so directed by your ISP. 


DSL Advanced Settings 


Do not change the DSL Advanced Settings unless so directed by your ISP. 


To view the DSL Advanced Settings screen, click Advanced Settings button on the DSL 
Settings screen. 


The test mode can be selected from the DSL Advanced Settings page. There are five test modes 
between the router and your ISP: 


e Normal test: Puts the router in a test mode in which it only sends a Normal signal. 
e Reverb test: Puts the router in a test mode in which it only sends a Reverb signal. 
e Medley test: Puts the router in a test mode in which it only sends a Medley signal. 


e No Retrain: In this mode the router will try to establish a connection as in normal mode, but 
once the connection is up it will not retrain if the signal is lost. 


e L3: Puts the router into the L3 power state. 


To run a test: 


1. Select a test mode and click Apply. 
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Z ZHONE 


Device Info DSL Advanced Settings 


Quick Setup 
Advanced Setup 


Select the test mode below. 


Layer2 Interface © Normal 
WAN Service © Reverb 
Ethernet Mode 

OMedley 
LAN 
AR ONo retrain 
Security O13 


Parental Control 
Quality of Service 


Routing 
DSL 


Click Tone Selection. 


The frequency band of ADSL is split up into 256 separate tones, each spaced 4.3125 kHz 
apart. With each tone carrying separate data, the technique operates as if 256 separate 
modems were running in parallel. The tone range is from 0 to 31 for upstream and from 32 to 
255 for downstream. Do not change these settings unless directed by your ISP. 


E? http: //192.168.1.1/adsicfgtone.html - Microsoft Internet Explorer 


ADSL Tone Settings 


Upstream Tones 
MO M1 M2 M3 M4 M5 Mé M7 MB M9 M10 M11 M12 M13 M14 
M16 M17 M18 M19 M20 M21 M22 M23 M24 M25 M26 M27 M28 M29 M30 

Downstream Tones 
M32 M33 M34 M35 M36 M37 M38 M39 M40 M41 M42 M43 M44 M45 M46 
M48 M49 M50 M51 M52 M53 M54 M55 M56 M57 M58 M59 M60 Mól M62 
M64 M65 M66 M67 M68 M69 M70 M71 M72 M73 M74 M75 M76 M77 M78 
M80 M81 M82 M83 M84 M85 MB MBF Mee M89 M90 M91 M92 M93 M94 R 
M96 M97 M98 M99 M 100M 101M 102M 103M 104M 105M 106 M 107 M 108M 109M 110R 
M1126 113M 114% 115M 116M 117M 118M 119M 120M 121 M 122M 123 M 124M 125 M 126R 
M 128M 129 M 130 M 131 M 132M 133 M 134 M 135 M 136 M 137 M 138 M 139 M 140M 141M 142R 
M 144M 145 M 146 M 147 M 148 M 149 M 150 M 151 M 152M 153 M 154 M 155 M 156M 157M 158R 
M 160M 161 M 162M 163M 164 M 165M 166 M 167 M168 M 169M 170 M 171 M 172M 173M 174k 
M 176 M 177 M 178 M 179M 180 M 181 M182 183M 184 M 185 M 186 M 187 M 188 M 189M 190R 
M 192 M 193 M 194 M 195 M 196 M 197 M 198 M 199 M 200 M 201 M 202 M 203 M 204 M 205 M 206 R 
M 208 M 209 M 210 M 211 M 212 M 213 M 214 M 215 M 216 M 217 M 218 M 219 M 220 M 221 M 222R 
M 224 M 225 M 226 M 227 M 228 M 229 M 230 M 231 M 232 M 233 M 234 M 235 M 236 M 237 M 238 R 
M 240 M 241 M 242 M 243 M 244 M 245 M 246 M 247 M 248 M 249 M 250 M 251 M 252 M 253 M 254 R 
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UPnP 


Universal Plug and Play (UPnP) is used to connect devices such as game consoles or printers 
that are on the same subnet. Game consoles such as xBox or PS3 which requires network 
connections can use UPnP to be connected to the Internet. 


@ ZHONE 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 


DNS Proxy 


UPnP Configuration 


NOTE: UPnP is activated only when there is a live WAN service with NAT enabled. 


M Enable UPnP 


By default the router has a Domain Name Service (DNS) running. All DNS resolution is performed 


by the router. 


@ ZHONE 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 


Quality of Service 


Routing 
DSL 
UPnP 


Interface Grouping 
LAN Ports 

IPSec 

Certificate 


Multicast 


DNS Proxy Configuration 


Host name of the Broadband Router: |Zhone | 


Domain name of the LAN network: [Home ] 


Apply/Save 


1. In the Host name of the Broadband Router text box enter the Host Name for the DNS 


Server to be used. 


2. Inthe Domain name of the LAN network text box enter the domain name of the local 


network. 


3. Click Save / Apply. 
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Interface Grouping 


The interface group feature allows you to open ports to allow certain Internet applications on the 
WAN side to pass through the firewall and enter your LAN. To use this feature, mapping groups 
should be created. 

To create a new mapping group: 


1. Click Add button 


@ ZHONE 


Interface Grouping -- A maximum 16 entries can be configured 


Device Info 


residan: Interface Grouping supports multiple ports to PVC and bridging groups. Each group will perform 


Advanced Setup as an independent network. To support this feature, you must create mapping groups with 


Layer2 Interface appropriate LAN and WAN interfaces using the Add button. The Remove button will remove the 
WAN Service grouping and add the ungrouped interfaces to the Default group. Only the default group has IP 
Ethernet Mode interface. 

LAN 

NAT 

eer Group Name | Remove | WAN Interface | LAN Interfaces [DHCP Vendor IDs 

Parental Control : 

Quality of Service Default atmÚ LAN(1-4) | 

Routing wlan0 | 

DSL 

UPnP Add 

DNS Proxy 


If you need to edit an entry, then click Edit for that group. 
After clicking the Add button, the Port Mapping Configuration screen appears 
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LAN Ports 


2. 


Enter a unique Group name. 


@ZHONE 


3. 


4. 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 
Multicast 
Wireless 
Diagnostics 


Management 


~l 


Interface grouping Configuration 


To create a new interface group: 
1. Enter the Group name and the group name must be unique and select either 2. 
(dynamic) or 3. (static) below: 


2. If you like to automatically add LAN clients to a WAN Interface in the new group add 
the DHCP vendor ID string. By configuring a DHCP vendor ID string any DHCP client request 
with the specified vendor ID (DHCP option 60) will be denied an IP address from the local 
DHCP server. 


3.Select interfaces from the available interface list and add it to the grouped interface 
list using the arrow buttons to create the required mapping of the ports. Note that these 
clients may obtain public IP addresses 


4. Click Save/ Apply button to make the changes effective immediately 


IMPORTANT If a vendor ID is configured for a specific client device, please REBOOT 
the client device attached to the modem to allow it to obtain an appropriate IP 
address. 


Group Name: | 
WAN Interface used in the grouping [br_0_0_35/atm0 +] 


Grouped LAN Available LAN 
Interfaces Interfaces 


=l 


Automatically Add 
Clients With the 
following DHCP 
Vendor IDs 


————_—— 
m 
m 
m 
m~ 


Apply/Save 


Select interfaces from the available interface list and add them to the grouped interface list 
using the arrow buttons to create the required mapping of the ports. 


Click Save/Apply. 


Enable/disable virtual LANs. Virtual LANs are used to enhance security and manage traffic going 


to different networks. 
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IPSec 


LAN Ports Configuration 


Device Info 
Quek Setup Use this page to enable/disable the Virtual LAN Ports feature. 
Advanced Setup 


Layer2 Interface 


WAN Service Lnag | 
Ethernet Mode 
ts 


NAT 

LAN Port 
Security 
Parental Control : LAN! 
Quality of Service LANZ 


Routing LAN3 
DNS LAN4 
DSL 

UPnP wand 
DNS Proxy 

Interface Grouping 

LAN Ports 


Internet Protocol Security (IPSec) allows you to set up secure tunnel access between two IP 
addresses. Encryption and key exchange make this a secure way to access remote networks. 
Contact your ISP for the necessary information to correctly configure this connection. 


@ ZHONE 


Device Info IPSec Tunnel Mode Connections 


Quick Setup 
Advanced Setup 


Add, remove or enable/disable IPSec tunnel connections from this page. 


Layer2 Interface [Connection Name [Remote Gateway | Local Addresses | Remote Addresses [Remove | 


WAN Service 
Ethernet Mode Add New Connection | Remove | 
LAN 


Click Add New Connection to access the IPSec Settings screen to enter your configurations. 
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@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 
Multicast 
Wireless 


Diagnostics 


IPSec Settings 


IPSec Connection Name 


few connection | 


Remote IPSec Gateway Address (IPv4 
bono | 


address in dotted decimal) 


Tunnel access from local IP addresses [Subnet Œ 


IP Address for VPN 
IP Subnetmask 


bono | 
[255.255.255.0 | 


Tunnel access from remote IP addresses [Subnet +] 


IP Address for VPN 
IP Subnetmask 


Key Exchange Method 
Authentication Method 
Pre-Shared Key 

Perfect Forward Secrecy 


Advanced IKE Settings 


pooo | 
[255.255.255.0 | 


[Auto(IKE) al 
[Pre-Shared Key z] 


key 
[Disable +] 
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The Show Advanced Settings button at the bottom of the screen provides additional encryption 
settings. 


@ZHONE 


Device Info 

Quick Setup 

Advanced Setup 
Layer2 Interface 
WAN Service 
Ethernet Mode 


IPSec Settings 
IPSec Connection Name 


Remote IPSec Gateway Address (IPv4 


address in dotted decimal) 


Tunnel access from local IP addresses 


IP Address for VPN 
IP Subnetmask 


[new connection 
[6.0.0.0 
| Subnet +] 


[a.0.0.0 
[255.255.255.0 


LAN 
NAT Tunnel access from remote IP addresses [Subnet +] 
Security IP Address for VPN [6.0.0.0 


Parental Control 


Quality of Service 


IP Subnetmask 


[255.255.255.0 


Routing Key Exchange Method [Auto(IKE) +] 
DSL Authentication Method [Pre-Shared Key +] 
UPnP Pre-Shared Key key 
DNS Proxy Perfect Forward Secrecy [Disable 7] 
Interface Grouping ; - 
Advanced IKE Settings Hide Advanced Settings 
LAN Ports 
Phase 1 
IPSec - 
Certificat Mode [Main +] 
z h SRA Encryption Algorithm 3DES y 
Multicast Integrity Algorithm [mos >] 
Wireless ie 
Select Diffie-Hellman Group for Key = 
Diagnostics Exchange [rozan E] 
Key Life Time 3600 Seconds 
Phase 2 
Encryption Algorithm [3DES al 
Integrity Algorithm [MDs al 
Select Diffie-Hellman Group for Key - 
[1024bit +] 
Exchange 
Key Life Time 3600 Seconds 
Apply /Save 
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Certificate 


Use the Certificate screen to add, view, or remove a certificate for use by a peer to verify your 
identity. A maximum of four certificates can be stored. You can add a certificate either by creating 
a new one or importing an existing one from a location where one is stored. 


Note: Certificates are used with TR-069. Firmware that does not support TR-069 will not support 
certificates. 


Local 
A local certificate identifies your device over the network. 
To apply for a certificate: 


1. Click Create Certificate Request 


@ ZHONE 


UPnP Local Certificates 
DNS Proxy 
Interface Grouping Add, View or Remove certificates from this page. Local certificates are used by peers to 
ere il dai e can be stored. 
IPSec 
Certificate 
Local | Name In Use Subject | Type Action 
Trusted CA 
Multicast Create Certificate Request | Import Certificate | 
Wireless 


If you have an existing certificate, click on Import Certificate to retrieve it. 


Z ZHONE 
E 


Routing Create new certificate request 
DSL 
UPnP To generate a certificate signing request you need to include Common Name, 
Organization Name, State/Province Name, and the 2-letter Country Code for the 
DNS Proxy ee 
certificate. 
Interface Grouping 
LAN Ports Certificate Name: | 
IPSec Common Name: | 
Certificate Organization Name: | 
Local State/Province Name: | 
Trusted CA Country/Region Name: [US (United States) = 
Multicast 
Apply | 
Wireless 
Niaonactire 


The Create new certificate request screen allows you to create a new certificate request. 
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2. Follow the screens that appear to configure a new certificate. 
3. Click Apply to submit the request. 


If you have a certificate already, you can simply import the certificate by pasting the certificate 
content and private key into the space provided. Click Apply to submit the request to import the 
certificate. 


Z ZHONE 
AA+ 


Device Info Import certificate 


uick Setu se vr : 
Q P Enter certificate name, paste certificate content and private key. 
Advanced Setup 


Layer2 Interface Certificate C 
WAN Service Name: 

Fthernet Mada 
LAN 

NAT 

Security 


Parental Control 


Quality of Service 
Routing Certificate: 
DSL 
UPnP 
DNS Proxy 
Interface Grouping 
LAN Ports 
IPSec 
Certificate 
Local 
Trusted CA 
Multicast 
Wireless 
Diagnostics Private 


Management Key: 
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Trusted CA 


The trusted certificate authority (CA) allows you to verify the certificates of your peers. 


The Trusted CA (Certificate Authority) Certificates screen also allows you to view certificates. 
You can store up to 4 certificates. 


To Import a certificate: 


1. Click on Import Certificate 


@ZHONE 


UPnP | Trusted CA (Certificate Authority) Certificates 

DNS Proxy | Add, View or Remove certificates from this page. CA certificates are used by you to 
Interface Grouping | verify peers' certificates. 

LAN Ports Maximum 4 certificates can be stored. 


IPSec 


Local Import Certificate | 


Trusted CA 


2. Enter the certificate name in the Certificate text box. 


Z ZHONE 
a | 


WAN Service Import CA certificate 


Ethernet Mode 
LAN Enter certificate name and paste certificate content. 


NAT Certi ficate m | 
Security Name: 
Parental Control 


Quality of Service 

Routing 

DSL 

UPnP 

DNS Proxy 

Interface Grouping Certificate: 

LAN Ports 

IPSec 

Certificate 
Local 
Trusted CA 

Multicast ih 


Wireless Apply | 


Minanar tine 


3. In the Certificate text window paste the content of the certificate. 


4. Click Apply. 
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Multicast 


Wireless 


Basic 


The Multicast screen allows you to configure IGMP settings for multicast. 


@ ZHONE 


Layer2 Interface 
WAN Service 
Ethernet Mode 
LAN 

NAT 


Security 


Parental Control 
Quality of Service 
Routing 

DSL 

UPnP 

DNS Proxy 
Interface Grouping 
LAN Ports 

IPSec 


Certificate 


Wireless 


Diagnostics 


IGMP Configuration 


Enter IGMP protocol configuration fields if you want modify default values shown below. 


Default Version: 
Query Interval: 
Query Response 
nterval: 

Last Member Query 
nterval: 
Robustness Value: 
Maximum Multicast 
Groups: 
Maximum Multicast 
Data Sources (for 
GMPv3): 
Maximum Multicast 
Group Members: 

Fast Leave Enable: 
LAN to LAN (Intra LAN) 
Multicast Enable: 


10 


a 
E 


The router's wireless feature can be configured to your needs. Sections covered under the 


wireless section include 


Basic 
Security 
MAC filter 


Wireless bridge 


Advanced 


Quality of service and station info. 
NOTE: The 1512 and 1511 do not provide wireless LAN. 


The Wireless - Basic screen allows you to enable or disable the wireless function. You can also 
hide the access point so others cannot see your ID on the network. If you enable wireless, be 
sure to enter an SSID, your wireless network name and select the country that you are in. 
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Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Wireless -- Basic 


This page allows you to configure basic features of the wireless LAN interface. You can 
enable or disable the wireless LAN interface, hide the network from active scans, set the 
wireless network name (also known as SSID) and restrict the channel set based on country 
requirements. 

Click "Apply/Save" to configure the basic wireless options. 


D Enable Wireless 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


This page allows you to configure basic features of the wireless LAN interface. You can 
enable or disable the wireless LAN interface, hide the network from active scans, set the 
wireless network name (also known as SSID) and restrict the channel set based on country 
requirements. 

Click "Apply/Save" to configure the basic wireless options. 


M Enable Wireless 


Hide Access Point 


O 

O Clients Isolation 
O Disable WMM Advertise 
O 


Enable Wireless Multicast Forwarding (WMF) 


SSID: wireless 
BSSID: = 22:02:71:00:27:77 
Country: | UNITED STATES {v 


Max 
Clients: 


Wireless - Guest/Virtual Access Points: 
Enable| Max 

Enabled SSID BSSID 

pen] o 

o ] 16 N/A 


[ulo_Guest1 [ [ o 
lo þe a fo o a fed va 
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Security 


The Wireless — Security screen allows you to select the network authentication method and to 
enable or disable WEP encryption. 


Note that depending on the network authentication that is selected, the screen will change 
accordingly so additional fields can be configured for the specific authentication method. 


Network authentication methods include the following— 


e Open — anyone can access the network. The default is a disabled WEP encryption setting 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Wireless -- Security 


This page allows you to configure security features of the wireless LAN interface. 
You may setup configuration manually 

OR 
through WiFi Protected Setup(WPS) 


WSC Setup 


Enable WSC [Disabled al 


Manual Setup AP 

You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 

Click "Apply/Save" when done. 


Select SSID: [wireless y] 
Network Authentication: [Open +] 
WEP Encryption: [Disabled +] 


Apply/Save 
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e Shared — WEP encryption is enabled and encryption key strength of 64-bit or 128-bit needs 
to be selected. Click on Set Encryption Keys to manually set the network encryption keys. Up 
to 4 different keys can be set and you can come back to select which one to use at anytime. 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 

Click "Apply/Save" when done. 


Select SSID: [wireless +] 
Network Authentication: [Shared +] 


WEP Encryption: [Enabled 7] 

Encryption Strength: [128-007] 

Current Network Key: fix 

Network Key 1: [234567290123 1 
Network Key 2: [234567290123 O 
Network Key 3: [234567290123 | 
Network Key 4: [234567290123 |] 


Enter 13 ASCII characters or 26 hexadecimal digits for 128-bit 
encryption keys 

Enter 5 ASCII characters or 10 hexadecimal digits for 64-bit 
encryption keys 


Apply/Save 
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802.1X — requires mutual authentication between a client station and the router by including 
a RADIUS-based authentication server. Information about the RADIUS server such as its IP 
address, port and key must be entered. WEP encryption is also enabled and the encryption 
strength must also be selected. 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 

Click "Apply/Save" when done. 


Select SSID: [wireless +] 
Network Authentication: mr -| 


RADIUS Server IP 
poco 


Address: 
RADIUS Port: fisi2 
RADIUS Key: | 


WEP Encryption: [Enabled 7] 
Encryption Strength: [28-bit E] 
Current Network Key: [27] 
Network Key 1: 1234567890123 


Network Key 2: [1234567890123 
Network Key 3: [1234567890123 


Network Key 4: 


Enter 13 ASCII characters or 26 hexadecimal digits for 128-bit 
encryption keys 

Enter 5 ASCII characters or 10 hexadecimal digits for 64-bit 
encryption keys 


L Appia | 
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WPA (Wi-Fi Protected Access) — usually used for the larger Enterprise environment, it uses 
a RADIUS server and TKIP (Temporal Key Integrity Protocol) encryption (instead of WEP 
encryption which is disabled). TKIP uses128-bit dynamic session keys (per user, per session, 
and per packet keys). 


@ZHONE 


Device Info Manual Setup AP 
Quick Setup 


Advanced Setup You can set the network authentication method, selecting data encryption, 


specify whether a network key is required to authenticate to this wireless network and 


Wireless specify the encryption strength. 
Basic Click "Apply/ Save" when done. 
Security 
MAC Filter Select SSID: [wireless +] 
Wireless Bridge - 

Network Authentication: 
Advanced 


Station Info 


WPA Group Rekey 


Diagnostics Interval: p 
Management RADIUS Server IP 
[0.0.0 
Address: 
RADIUS Port: [fsz 
RADIUS Key: | 
WPA Encryption: [TKIP z] 
WEP Encryption: [Disabled Y] 
Apply/Save 


WPA-PSK (Wi-Fi Protected Access — Pre-Shared Key) — WPA for home and SOHO 
environments also using the same strong TKIP encryption, per-packet key construction, and 
key management that WPA provides in the enterprise environment. The main difference is 
that the password is entered manually. A group re-key interval time is also required. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 

Click "Apply/Save" when done. 


Select SSID: [wireless +] 


Network Authentication: jj 


WPA Pre-Shared Key: | Click here to display 
WPA Group Rekey 
Interval: 

WPA Encryption: 
WEP Encryption: 


15xx-A1 Family Router Users Guide 85 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 

Basic 

Security 

MAC Filter 

Wireless Bridge 

Advanced 

Station Info 
Diagnostics 
Management 


WPA2 (Wi-Fi Protected Access 2) — second generation WPA which uses AES (Advanced 
Encryption Standard) instead of TKIP as its encryption method. Network re-authorization 
interval is the time in which another key needs to be dynamically issued. 


Z ZHONE 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 

Click "Apply/Save" when done. 


Select SSID: [wireless +] 
Network Authentication: 


WPA2 Preauthentication:[Disabled +] 


Network Re-auth 


[5000 
Interval: 
WPA Group Rekey E 
Interval: 
RADIUS Server IP 
[6.0.0.0 
Address: 
RADIUS Port: fisiz 
RADIUS Key: | 
WPA Encryption: AES y 


WEP Encryption: [Disabled al 
Apply/Save | 


WPA2-PSK (Wi-Fi Protected Access 2 — Pre-Shared Key) — suitable for home and SOHO 
environments, it also uses AES encryption and requires you to enter a password and a re-key 
interval time. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 

Click "Apply/ Save" when done. 


Select SSID: [wireless al 


Network Authentication: 


WPA Pre-Shared Key: | Click here to display 


WPA Group Rekey E 


Interval: 


WPA Encryption: [AES +] 
WEP Encryption: [Disabled Y] 


Apply/Save 
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e Mixed WPA2 / WPA — useful during transitional times for upgrades in the enterprise 
environment, this mixed authentication method allows “upgraded” and users not yet 
“upgraded” to access the network via the router. RADIUS server information must be entered 
for WPA and a as well as a group re-key interval time. Both TKIP and AES are used. 


@ ZHONE 


Device Info You can set the network authentication method, selecting data encryption, 
Quick Setup specify whether a network key is required to authenticate to this wireless network and 
Advanced Setup od the enerypnion strength. 
Click "Apply/ Save" when done. 
Wireless 
Basic Select SSID: [wireless +] 
Security 
MAC Filter Network Authentication: [ME 
Wireless Bridge 
WPA2 Preauthentication: [Disabled +] 
Advanced 
: Network Re-auth EST 
Station Info interval 
Diagnostics WPA Group Rekey E 
Management Interval: 
RADIUS Server IP 
ooo 
Address: 
RADIUS Port: fisi2 
RADIUS Key: | 
WPA Encryption: [TKIP+AES +] 


WEP Encryption: 


Disabled [Y 


Apply/Save 


e Mixed WPA2 / WPA-PSK — useful during transitional times for upgrades in the home or 
SOHO environment, a pre-shared key must be entered along with the group re-key interval 
time. Both TKIP and AES are also used. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 


Manual Setup AP 

You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and 
specify the encryption strength. 


Wireless Click "Apply/Save" when done. 
Basic 
Security Select SSID: [wireless al 
MAC Filter 
Network Authentication: 
Wireless Bridge 
Advanced WPA Pre-Shared Key: | Click here to display 
Station Info WPA Group Rekey PH 
Diagnostics Interval: 
Management WPA Encryption: [TKIP+AES +] 


WEP Encryption: [Disabled | 


Apply/Save 
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MAC Filter 


By default, MAC filter is disabled meaning any WiFi clients with the correct access will be allowed 
to access the Access Point. The MAC filter screen allows you to control what WiFi clients are 
allowed or deny to access the WiFi Access Point using the MAC address of the devices. 


1. 


2. 


Selected the SSID you want to WiFi client access. 


To allow access only a selected WiFi client, select Allow, then click on Add to add the MAC 
addresses you want to be able to access the WiFi network. 


To block certain WiFi Clients from accessing the WiFI network, select Deny, then click Add 
to add the MAC address of the WiFi client you want to block from Accessing the WiFi 
network. 


@ZHONE 


Wireless -- MAC Filter 


Device Info 
Quick Setu 
p Select SSID: [wireless al 

Advanced Setup 

Wireless 
Bisig MAC Restrict Mode: € Disabled € Allow © Deny 
Security 
MAC Filter 
Wireless Bridge [mac Address | Remove 
Advanced A 
Station Info 

Diagnostics Ada | Remove 

1 Management 


To add a MAC Filter: 


1. 


In the Wireless — MAC Filter page, select the SSID for the 
From one of the MAC Restrict Mode radio buttons, select Disabled, Allow or Deny. 
Click Add. 


In the Wireless - MAC Filter screen enter the MAC address in the MAC Address text box, 
then click Save/Apply. 
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Device Info 
Quick Setup 
Advanced Setup 
Wireless 

Basic 

Security 

MAC Filter 

Wireless Bridge 

Advanced 

Station Info 
Diagnostics 
Management 


Wireless Bridge 


Wireless -- MAC Filter 


Enter the MAC address and click "Apply/Save" to add the MAC address to the wireless MAC 
address filters. 


MAC Address: | 


In the Wireless — Wireless Bridge screen, you can select the mode for the router, either access 


point or wireless bridge. If you enable the bridge restrict option, then proceed to enter the MAC 
addresses of the remote bridges. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 

Basic 

Security 

MAC Filter 

Wireless Bridge 

Advanced 

Station Info 
Diagnostics 
Management 


To restrict a wireless bridge: 


1. 
dropdown. 


AP Mode options are 


e Access Point 


Wireless -- Bridge 


This page allows you to configure wireless bridge features of the wireless LAN interface. 
You can select Wireless Bridge (also known as Wireless Distribution System) to disable 
access point functionality. Selecting Access Point enables access point functionality. 
Wireless bridge functionality will still be available and wireless stations will be able to 
associate to the AP. Select Disabled in Bridge Restrict which disables wireless bridge 
restriction. Any wireless bridge will be granted access. Selecting Enabled or Enabled(Scan} 
enables wireless bridge restriction. Only those bridges selected in Remote Bridges will be 
granted access. 

Click "Refresh" to update the remote bridges. Wait for few seconds to update. 

Click "Apply/Save" to configure the wireless bridge options. 


AP Mode: 


Bridge Restrict: [Enabled al 


Remote Bridges MAC 


Address: | | 


Access Paint 


In the Wireless — Wireless Bridge screen select the access point mode from the AP Mode 
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e Wireless Bridge 


From the Bridge Restrict dropdown select to Enable, Disable or Refresh (Enabled Scan). 
If you have chosen to enable access point, in the Remote Bridges MAC Address text 
box(es) MAC address(es) for the bridge(s). 


If you have chosen access point Enabled (Scan), select the MAC addresses to restrict and 
clock Apply / Save. 


@ ZHONE 


Device info Wireless -- Bridge 
Quick Setup 3 . r ; . . 
This page allows you to configure wireless bridge features of the wireless LAN interface. 
Advanced Setup You can select Wireless Bridge (also known as Wireless Distribution System) to disable 
Wireless access point functionality. Selecting Access Point enables access point functionality. 
Basic Wireless bridge functionality will still be available and wireless stations will be able to 
Security associate to the AP. Select Disabled in Bridge Restrict which disables wireless bridge 
MAC Filter restriction. Any wireless bridge will be granted access. Selecting Enabled or Enabled(Scan) 
. : enables wireless bridge restriction. Only those bridges selected in Remote Bridges will be 
Wireless Bridge granted access. 
Advanced Click "Refresh" to update the remote bridges. Wait for few seconds to update. 
Station Info Click "Apply/Save" to configure the wireless bridge options. 
Diagnostics 
Management AP Mode: [Access Point y] 
Bridge Restrict: [Enabled(Scan) al 
Remote Bridges MAC SSID BSSID 
Address: 
D | Wireless 2A:1A:92:BE:BA:1F 
D | Wireless 2A:1B:FC:DD:CC:A0 
D | Wireless 2A:1B:FC:DD:CC:E6 
D | Wireless 2A:1B:FC:DD:CC:32 
O [Wireless  |2A:1A:92:BE:B9:8F 
O [Wireless  |2A:1A:92:BE:B9:9F 
D | Wireless 2A:1B:FC:DD:CC:34 
O | Wireless 2A:14:92:BE:BA:4D 
D | Wireless 2A:1A4:92:BE:BA:25 
D | Wireless 2A:1B:FC:DD:CB:FO 
D | Wireless 2A:1B:FC:DD:CA:C4 
P | Wireless 2A:14:92:BE:BA:67 
D | Wireless 2A: 1A:92:BE:BA:47 
D | Wireless 2A:1A:92:BE:BA:7 1 
C |SkyZhone |00:14:2B:00:04:D3 
Refresh Apply/Save | 
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Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Advanced 


Wireless -- Bridge 


This page allows you to configure wireless bridge features of the wireless LAN interface. 
You can select Wireless Bridge (also known as Wireless Distribution System) to disable 
access point functionality. Selecting Access Point enables access point functionality. 
Wireless bridge functionality will still be available and wireless stations will be able to 
associate to the AP. Select Disabled in Bridge Restrict which disables wireless bridge 
restriction. Any wireless bridge will be granted access. Selecting Enabled or EnabledíScan) 
enables wireless bridge restriction. Only those bridges selected in Remote Bridges will be 
granted access. 

Click "Refresh" to update the remote bridges. Wait for few seconds to update. 

Click "Apply/Save" to configure the wireless bridge options. 


AP Mode: Access Point +] 


Bridge Restrict: 


The Advanced page configures advanced features of the wireless LAN interface. 


WwW Note: Do not change the settings on this screen if you are not familiar with WiFi settings. 
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Wireless -- Advanced 


Device Info p i 
á This page allows you to configure advanced features of the wireless LAN interface. You 
Quick Setup ; ý ue a 
can select a particular channel on which to operate, force the transmission rate to a 
Advanced Setup particular speed, set the fragmentation threshold, set the RTS threshold, set the wakeup 
Wireless interval for clients in power-save mode, set the beacon interval for the access point, set 
Basic XPress mode and set whether short or long preambles are used. 
Security Click "Apply/Save" to configure the advanced wireless options. 
MAC Filter Band: [2.4GHz y] 
Wireless Bridge Channel: 1 A Current: 11 (interference: 
duancad = j acceptable) 
í Auto Channel Timer(min) fp 
Station Info 
i i 54g™ Rate: [Auto al 
Diagnostics Multicast Rate: [Auto y] 
Management Basic Rate: [Default y] 
Fragmentation ae 
Threshold: = 
RTS Threshold: 


DTIM Interval: 
Beacon Interval: ho t~=~*d 
Global Max Clients: fze ss 
Press™ Technology: [Disabled =] 

548" Mode: [54g Auto. El 
54g™ Protection: [Auto 7] 

Preamble Type: [long >] 

Transmit Power: [100% E] 


WMMONi-Fi Multimedia): Enabled ¥ 


WAA No 

[Di bled +] 
Acknowledgement: sae 
WAM APSD: [Enabled +] 


Apply/Save | 


Advanced features include: 


e Band — a default setting at 2.4GHz — 802.11g 


e Channel — 802.11b and 802.11g use channels to limit interference from other devices. If you 
are experiencing interference with another 2.4Ghz device such as a baby monitor, security 
alarm, or cordless phone, then change the channel on your router. 


e Auto Channel Timer — a timer that rescans and finds the best available channel for use on 
your wireless network. 


e 54g Rate — rate at which information will be transmitted and received on your wireless 
network. 


e Multicast Rate — the rate at which a message is sent to a specified group of recipients. 


e Basic Rate — the set of data transfer rates that all the stations will be capable of using to 
receive frames from a wireless medium. 


e Fragmentation Threshold—used to fragment packets which help improve performance in 
the presence of radio frequency (RF) interference. 


e RTS Threshold (Request to Send Threshold) — determines the packet size of a 
transmission through the use of the router to help control traffic flow. 


e DTIM Interval — sets the Wake-up interval for clients in power-saving mode. 


e Beacon Interval — a packet of information that is sent from a connected device to all other 
devices where it announces its availability and readiness. A beacon interval is a period of 
time (sent with the beacon) before sending the beacon again. The beacon interval may be 
adjusted in milliseconds (ms). 
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Station Info 


Xpress Technology — a technology that utilizes standards based on frame bursting to 
achieve higher throughput. With Xpress Technology enabled, aggregate throughput (the sum 
of the individual throughput speeds of each client on the network) can improve by up to 25% 
in 802.11g only networks and up to 75% in mixed networks comprised of 802.11g and 
802.11b equipment. 


54g Mode — 54g is a Broadcom Wi-Fi technology. 


54g Protection — the 802.11g standards provide a protection method so 802.11g and 
802.11b devices can co-exist in the same network without “speaking” at the same time. Do 
not disable 54g Protection if there is a possibility that an 802.11b device may need to use 
your wireless network. In Auto Mode, the wireless device will use RTS/CTS (Request to Send 
/ Clear to Send) to improve 802.119 performance in mixed 802.11g/802.11b networks. Turn 
protection off to maximize 802.11g throughput under most conditions. 


Preamble Type — this information relates to wireless communication based 


Transmit Power — select from 20%, 40%, 60%, 80% and 100%. The default value is 100% 
but can be changed. 


WMM (Wi-Fi Multimedia) — prioritizes traffic from different applications such as voice, audio 
and video applications under different environments and conditions. 


WMM No Acknowledgement — the acknowledgement policy used on the MAC level. 
Enabling no-acknowledgement can result in efficient throughput but higher error rates ina 
noisy Radio Frequency (RF) environment. 


WMM APSD — APSD (Automatic Power Save Delivery). APSD manages radio usage for 
battery-powered devices to allow battery life in certain conditions. APSD allows a longer 
beacon interval until an application—VolP for example—requiring a short packet exchange 
interval starts. Only if the wireless client supports APSD does APSD affect radio usage and 
battery life. 


The Station Info page shows stations that have been authorized access to the router through its 


wireless function. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Basic 
Security 
MAC Filter 
Wireless Bridge 
Advanced 
Station Info 
Diagnostics 


Management 


Wireless -- Authenticated Stations 


This page shows authenticated wireless stations and their status. 


[mac SSID Interface 


Refresh 


Associated | Authorized 
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Diagnostics 
The diagnostics screen allows you to run diagnostic tests to check your DSL connection. The 
outcome will show test results of three connections— 


e Connection to your local network 
e Connection to your DSL service provider 
e Connection to your Internet service provider 


The Test and Test with OAM F4 buttons allow you to retest if necessary. 


Click the Next Connection button to test your router’s next connection. 


br_0_0_35 Diagnostics 


Device Info 
Quick Setup Your modem is capable of testing your DSL connection. The individual tests are listed below. 


Advanced Setup If a test displays a fail status, click "Rerun Diagnostic Tests" at the bottom of this page to 
i make sure the fail status is consistent. If the test continues to fail, click "Help" and follow the 
troubleshooting procedures. 


Management Test the connection to your local network 


Test your LAN(1-4) Connection: [PASS |Help 


[Test your Wireless Connection: [PASS [Help 


Test the connection to your DSL service provider 


[Test xDSL Synchronization: [Pass [Help 
[Test ATM OAM F5 segment ping: [Pass [Help 


Test ATM OAM F5 end-to-end ping: [PASS |Help 
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Management 


The Management section gives you access to certain setups for the purpose of maintaining the 
system, including backing up the configurations, viewing system log, maintaining access control, 
updating software, etc. 


Settings 


Backup Settings 
To save a copy of the configurations that you have made on your router: 


1. From the Settings — Backup page click Backup Settings. 


@@ZHONE 


Davieelate Settings - Backup 


uick Setu mn í A A A el 
Q P Backup DSL router configurations. You may save your router configurations to a file on 
Advanced Setup your PC. 
Wireless 
Diagnostics 


Management Backup Settings | 


Settings 


Backup 


The below pop-up screen will appear with a prompt to open or save the file to your 
computer. 


File Download X| 


Some files can harm your computer. If the file information below 
looks suspicious, or you do not fully trust the source, do not open or 
save this file. 

File name: backupsettings.conf 

File type: 

From: 192.168.1.1 


Would you like to open the file or save it to your computer? 


Dpen | [Save] Cancel | More Info | 


V Always ask before opening this type of file 


2. Click Save. 
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Update Settings 
To load a previously saved configuration file onto your router: 


1. From the Settings — Update Settings page, click Browse to find the file on your computer. 


2. Click Update Settings. 


@ ZHONE 


Device Info Tools -- Update Settings 
papas Update DSL router settings. You may update your router settings using your saved files. 
Advanced Setup 
Wireless Settings File Nam: oe] 
Diagnostics 
Management Update Settings | 
Settings 
Backup 
Update 


The router will restore settings and reboot to activate the restored settings. 


Restore Default 
Restore Default will delete all configuration changes you have made and restore the router to 
factory default settings. 


To restore the factory defaults: 


1. From the Settings — Restore Default Settings page click Restore Default Settings. 


@ZHONE 


Device late Tools -- Restore Default Settings 


Quick Setup Restore DSL router settings to the factory defaults. 
Advanced Setup 


Wireless 
Diagnostics Restore Default Settings | 


Management 
Settings 
Backup 
Update 
Restore Default 


2. Click OK when the pop-up window appears confirming that you want to restore factory 
default settings to your router. 
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Microsoft Internet Explorer 


2) Are you sure you want to restore factory default settings? 


The router will restore the default settings and reboot. 


System Log 


The System Log dialog allows you to view the System Log and configure the System Log options. 
To view the System Log click View System Log to check the log file. 


Note: Only configure this if you are instructed by your ISP technician during troubleshooting 
sessions. 


@ZHONE 


Device Info System Log 


Quick Setup 
Advanced Setup 


The System Log dialog allows you to view the System Log and configure the System Log 


options. 
Wireless 
Diagnostics Click "View System Log" to view the System Log. 
Management 
Settings Click "Configure Systern Log" to configure the System Log options. 
System Log 


SNMP Agent View System Log | Configure System Log | 


TR-069 Client 
Access Control 
Update Software 
Reboot 


Tools 
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The System Log page shows the date and time of the recorded event, which facility captured the 
event, the severity of the event and a message which describes the event. 


System Log 


Date/Time [Facility (Severity Message 
Jan 1 04:52:48|syslog |emerg |BCM96345 started: BusyBox v1.00 (2005.04.12-18:11+0000) 
Jan 1 04:52:48|user  [crit kernel: eth0 Link UP. 
Jan 1 04:52:48|user  [crit kernel: ADSL G.994 training 
Jan 1 04:52:48|user  [crit kernel: ADSL G.992 started 
Jan 1 04:52:48|user |crit kernel: ADSL G.992 channel analysis 
Jan 1 04:52:48|user crit kernel: ADSL link up, interleaved, us=800, ds=7616 
Jan 1 04:52:51|daemon|crit pppd[358]: PPP LCP UP. 
Jan 1 04:52:52 |daemon|jerr pppd[358]: User name and password authentication failed. 
Jan 1 04:52:58 |daemon|crit pppd[358]: PPP LCP UP. 
Jan 1 04:52:59 |daemon|jerr pppd[358]: User name and password authentication failed. 
Jan 1 04:53:05|daemon|crit pppd[358]: PPP LCP UP. 


Dan 1 04:53:06 daemon [err |pppd[358]: User name and password authentication failed. 


_Refresh | close | 
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Configure System Log 


If the log is enabled, the system will log selected events based on their level. The log levels are 


Emergency 
Alert 
Critical 
Error 
Warning 
Notice 


Informational 


Debugging. 


All events above or equal to the selected log level will be logged and displayed. 


@ ZHONE 


Device Info 

Quick Setup 

Advanced Setup 

Wireless 

Diagnostics 

Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 


Tools 


System Log -- Configuration 


If the log mode is enabled, the system will begin to log all the selected events. For the 
Log Level, all events above or equal to the selected level will be logged. For the Display 
Level, all logged events above or equal to the selected level will be displayed. If the 
selected mode is 'Remote' or 'Both,' events will be sent to the specified IP address and 
UDP port of the remote syslog server. If the selected mode is 'Local' or 'Both,' events will 
be recorded in the local memory. 


Select the desired values and click 'Apply/Save' to configure the system log options. 
Log: € Disable © Enable 


Log Level: [Debugging al 
Display Level: [Error al 
Mode: [Local +] 


Apply/Save 


If the selected mode is Remote or Both, events will be sent to the specified IP address and UDP 
port of a remote system log server. 


If the selected mode is Local or Both, events will be recorded in the local memory. 


Select the desired values and click Save/Apply button to configure the system log. 
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SNMP Agent 


SNMP (Simple Network Management Protocol) provides a means to monitor status and 
performance as well as set configuration parameters. lt enables a management station to 
configure, monitor and receive trap messages from network devices. 


Note: Do not change this information unless you are instructed to by your ISP technician. 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 
Tools 


TR-069 Client 


SNMP - Configuration 


Simple Network Management Protocol (SNMP) allows a management application to 
retrieve statistics and status from the SNMP agent in this device. 


Select the desired values and click "Apply" to configure the SNMP options. 


SNMP Agent € Disable € Enable 


Read Community: [public 


Set Community: [private 


System Name: Sysname 


System Location: [unknown 
System Contact: — Junknown 
Trap Manager IP: 0.0.0.0 


Save/Apply | 


The router includes a TR-069 client WAN management protocol with default values configured. 


Note: Do not change this information unless you are instructed to by your ISP technician. 


To enable the TR-069 client protocol: 


1. Select Enable. 
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2. 


Internet Time 


@ZHONE 


Device Info TR-069 client - Configuration 
Quick setip WAN Management Protocol (TR-069) allows a Auto-Configuration Server (ACS) to perform 
Advanced Setup auto-configuration, provision, collection, and diagnostics to this device. 
Wireless 
Diagnostics Select the desired values and click "Apply/Save" to configure the TR-069 client options. 
Management 
Ñ Inform € Disable © Enable 
Settings 
diia Inform Interval: 300 
SNMP Agent ACS URL: A 
TR-069 Client ACS User Name: [admin 
Access Control ACS Password: poes: 
Update Software WAN Interface used by TR-069 [ay WAN] 
Reboot client: 
Tools 
M Connection Request Authentication 
Connection Request User Name: admin 
Connection Request Password: [ee 
Connection Request URL: 
Apply/Save | GetRPCMethods | 


Click on the Save/Reboot button for the change to take place. 


Your router can synchronize its internal clock servers with servers running Network Time Protocol 
(NTP). 


1. 


To enable NTP, click Automatically synchronize with Internet time servers and enter the 
NTP settings. 


You may want to select a different NTP server or time zone. 


Click Apply / Save. 
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@ ZHONE 


Time settings 
Device Info 
Quick Setup This page allows you to the DSL Router's time configuration. 
Advanced Setup on 
iv] Automatically synchronize with Internet time servers 
Wireless 
Diagnastiós First NTP time l 
| Other w |192.43.244.18 
Management server: 
Settings areena NTP time [Other ion 
System Log server: 
Thi P ti E : = 
SNMP Agent EM: era 
i server: 
TR-069 Client Fourth NTP time q ri 
Internet Time server: one 
Access Control Fifth NTP time r 
None he 
Update Software server: 
Reboot l 
Tool Time zone offset: | (GMT-08:00) Pacific Time, Tijuana vj 
ools 
Synchronize 
= Fo [5-1440] (minutes) 
interval: <= 


Access Control 


You can enable or disable some services of your router by LAN or WAN. If no WAN connection is 
defined, only the LAN side can be configured. 


Note: Do not change this information unless you are instructed to by your ISP technician. 


Services 


Services that can be enabled or disabled on the LAN/WAN are 


e FTP 

e HTTP 

e ICMP 

e SNMP 
e SSH 

e Telnet 
e TFTP. 
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Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Services 
Passwords 
IP Addresses 
Update Software 
Reboot 


Tools 


Passwords 


Access Control -- Services 


A Service Control List ("SCL") enables or disables services from being used. 


ADE 


Access the Passwords screen under the Access Control section to change a password. Select 
an account and enter the current password and the new password and then click on the Save / 


Apply button. 


@ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Services 
Passwords 
IP Addresses 
Update Software 
Reboot 


Tools 


Access Control -- Passwords 


Access to your broadband router is controlled through three user accounts: admin, 
support, and user. 


The user name "admin" has unrestricted access to change and view configuration of your 
DSL Router. 


The user name "support" is used to allow an ISP technician to access your DSL Router for 
maintenance and to run diagnostics. 


The user name "user" can access the DSL Router, view configuration settings and statistics, 
as well as, update the router's software. 


Use the fields below to enter up to 16 characters and click "Apply/Save" to change or 
create passwords. Note: Password cannot contain a space. 


Username: | +] 
Old Password: | 
New Password: | 
Confirm Password;| 
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IP Addresses 


Web access to the router may be limited when Access Control Mode is enabled. 


Note: Do not change this information unless you are instructed to by your ISP technician. Adding 
or changing the settings on this page may cause you to lose management access to the router. 


@ ZHONE 


Access Control -- IP Address 


Device Info 

ick Set ve y 
iee Setup The IP Address Access Control mode, if enabled, permits access to local management 
Advanced Setup services from IP addresses contained in the Access Control List. If the Access Control 
Wireless mode is disabled, the system will not validate IP addresses for incoming packets. The 
Diagnostics services are the system applications listed in the Service Control List 
Management 

Settings Access Control Mode: © Disable © Enable 

System Log 

SNMP Agent 


Remove 


G Address | Subnet Mask 


TR-069 Client 

Access Control 
Services Add | _Remove | 
Passwords 
IP Addresses 


To add the IP address to the IP address list: 
4. Click Add. 


2. In the Add IP Addresses screen, assign the IP address of the management station that is 
permitted to access the local management services, in the IP Address text box. 


3. Enter the Subnet Mask. 
4. Click Save / Apply. 


5. In the Access Control -- IP Address screen, select the IP address then select Enabled to 
enable Access Control Mode. 


@ZHONE 


Device Info Add IP Addresses 
Quick Setup . oe F 
Enter the IP address of the management station permitted to access the local management 
Advanced Setup services, and click "Apply/ Save". 
Wireless 
Diagnostics IP Address: | 
Management Subnet OO 
Setti Mask: 
ettings 
System L 
SA Apply/Save 
SNMP Agent 
TR-069 Client 
Access Control 
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Update Software 


Note: Do not perform this operation unless you are instructed to by your ISP technician. 


If your ISP releases new software for your router, follow these steps to perform an upgrade: 


1. Obtain an updated software image file from your ISP. 


2. Enter the path to the image file location or click on the Browse button to locate the image 


file. 


3. Click Update Software once (and only once) to upload the new image file. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 
Tools 


Reboot 


Tools -- Update Software 
Step 1: Obtain an updated software image file from your ISP. 


Step 2: Enter the path to the image file location in the box below or click the "Browse" 
button to locate the image file. 


Step 3: Click the "Update Software" button once to upload the new image file. 


NOTE: The update process takes about 2 minutes to complete, and your DSL Router will 
reboot. 


Software File Name: | Browse... | 
Update Software | 


Clicking Save/Reboot saves all the configurations you have made, then reboots the router using 
the new configuration information. 


@ ZHONE 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 


Tools 


Click the button below to reboot the router. 


Reboot 
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The Ping and Trace Route tools may be used to verify accessibility and routes. 


@ ZHONE 


Device Info 

Quick Setup 

Advanced Setup 

Wireless 

Diagnostics 

Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 


Tools 


Ping and Trace Route 
You can use ping and trace route in this page. 


Please input the IP address and click "Ping" or "Trace Route". 


IP Address: 


Device Info 
Quick Setup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 
Tools 


.168.1.2 (192.168 56 data bytes 
56 bytes from 192.168.1.2: icmp_seg=0 ttl=128 time=0.9 ms 
56 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.7 ms 
56 bytes from 192.168.1.2: icmp_seq=2 ttl=128 time=0.9 ms 
56 bytes from 192.168.1.2: icmp_seq=3 ttl=128 time=0.7 ms 


--- 192.168.1.2 ping statistics --- 


4 packets transmitted, 4 packets received, 0% packet loss 
round-trip min/avg/max = 0.7/0.8/0.9 ms 


Ping Result 
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Device Info 

Quick Setup 

Advanced Setup 

Wireless 

Diagnostics 

Management 
Settings 
System Log 
SNMP Agent 
TR-069 Client 
Access Control 
Update Software 
Reboot 


Tools 


Tracing route to [192.168.1.2] 
1 192.168.1.2 (192.168.1.2) 
Trace complete. 


Trace route Result 


1.824 ms 1.424 ms 0.881 ms 
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Chapter6 Troubleshooting 


The Router Is Not Functional 


1. 


Check to see that the power LED is green and the network cables are installed correctly. 
Refer to the quick start guide for more details. 


Check to see that the LAN and Status LEDs are green. 
Check the settings on your PC. Again, refer to the quick start guide for more details 
Check the router's settings. 


From your PC, can you ping the router? Assuming that the router has DHCP enabled and 
your PC is on the same subnet as the router, you should be able to ping the router. 


Can you ping the WAN? Your ISP should have provided the IP address of their server. If you 
can ping the router and your protocols are configured correctly, you should be able to ping 
the ISP's network. If you cannot ping the ISP's network, make sure you are using the correct 
protocols with the correct VPI/VCI values. 


Make sure NAT is enabled if you are using private addresses on the LAN ports. 


You Cannot Connect to the Router 


1. 


Check to see that the power LED is green and that the network cables are installed correctly. 
If the LED is off, make sure the router is turned on. If the LED is red, please contact your 
ISP. 


Check the Ethernet network cable is plugged in correctly. If the LAN LED does not turn 
green when the Ethernet cable is connected to the router, check the cable. 


Make sure you have connected the Ethernet port to the PC. 


Make sure that your PC and the router are on the same network segment. The router's 
default IP address is 192.168.1.1. If you are running a Windows-based PC, type ipconfig /all 
(or winipcfg /all on Windows 95, 98, or ME) at a command prompt to determine the IP 
address of your network adapter. Make sure that it is within the same 192.168.1.x subnet. 
Your PC's subnet mask must match the routers subnet mask. The router has a default 
subnet mask of 255.255.255.0. 


If the router is in Bridge mode, you may need to set your PC to a fixed IP address within the 
same subnet as the modem (i.e. 192.168.1.2) 


The DSL LED Continues to Blink 


This means that the DSL line is trying to train but for some reason it cannot establish a valid 
connection. The likely cause of this is that you are too far away from the central office. Contact 
your DSL service provider for further assistance. 
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The DSL LED is Always Off 


Make sure you have DSL service. You should receive notification from your ISP that DSL service 
is installed. You can usually tell if the service is installed by listening to the phone line: you will 
hear some high-pitched noise. If you do not hear high-pitched noise, contact your ISP. 


The Internet LED is Always Off 


If the router is set to router mode (i.e. IPOE or IPoE or PPPoA), and the Internet LED is off, check 
the modem configuration. 


View the Router Summary page and see if the router is configured properly. Check the WAN 
Status to make sure the link is up and the router is able to get a WAN IP address from the 
network. 


Diagnosing Problems using IP Utilities 


Ping 


Ping is a command you can use to check whether your PC can recognize other computers on 
your network and the Internet. A ping command sends a message to the computer you specify. If 
the computer receives the message, it sends messages in reply. To use it, you must know the IP 
address of the computer with which you are trying to communicate. 

On Windows-based computers, you can execute a ping command from the Start menu. 


1. Click the Start button, and then click Run. In the Open text box, type a statement such as 
the following: 


ping 192.168.1.1 or the IP address you have changed 


2. Click OK. You can substitute any private IP address on your LAN or a public IP address for 
an Internet site, if known. 


If the target computer receives the message, a Command Prompt window is displayed: 


[7 C:\WINDOWS\system32\cmd.exe 


C:\>ping 192.168.1.1 
Pinging 192.168.1.1with 32 bytes of data: 


Reply from192.168.1.1: bytes=32 time<i@ms TTL=128 
: bytes=32 time<iBms TIL=128 

.1.1: bytes=32 time<i@ms TTL=128 

Reply from192.168.1.1: bytes=32 time<i@ms TTL=128 


Ping statistics for 192.168.1.1 

Packets: Sent = 4, Received = 4, Lost = Ø (Øz loss). 
Approximate round trip times in milli-seconds: 

Minimum = @ms, Maximum = Øms, Average = Gms 


C:N) 
If the target computer cannot be located, you will receive the message “Request timed out.” 


Using the ping command, you can test whether the path to the device is working (using the 
preconfigured default LAN IP address 192.168.1.1) or another address you assigned. 


You can also test whether access to the Internet is working by typing an external address, such 
as that for www.yahoo.com (216.115.108.243). If you do not know the IP address of a particular 
Internet location, you can use the nslookup command, as explained in the following section. 
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Tracert 


Nslookup 


From most other IP-enabled operating systems, you can execute the same command at a 
command prompt or through a system administration utility. 


You can use the tracert command to determine the route to an external web site. 
On Windows-based computers, you can execute the tracert command from the Start menu. 
1. Click the Start button, and then click Run. In the Open text box, type the following: 


tracert www.zhone.com 


You can use the nslookup command to determine the IP address associated with an Internet site 
name. You specify the common name, and the nslookup command looks up the name in on your 
DNS server (usually located with your ISP). If that name is not an entry in your ISP’s DNS table, 
the request is then referred to another higher-level server, and so on, until the entry is found. The 
server then returns the associated IP address. 


On Windows-based computers, you can execute the nslookup command from the Start menu. 

1. Click the Start button, and then click Run. In the Open text box, type the following: 
Nslookup 

2. Click OK. A Command Prompt window displays with a bracket prompt (>). At the prompt, 
type the name of the Internet address that you are interested in, such as 


www.microsoft.com. 


The window will display the associate IP address, if known, as shown below: 


[= Command Prompt - nslookup 


Non- author itative ansuer 
wu > microsoft akadns 
Addresses: 207.46.230. econ 207. 46. 230.229, 207.46.131.91, 267.46.197.162 
Aliases: www.microsoft. 
> 


There may be several addresses associated with an Internet name. This is common for web 
sites that receive heavy traffic; they use multiple, redundant servers to carry the same 
information. 


3. To exit from the nslookup utility, type exit and press [Enter] at the command prompt. 
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Appendix A - Glossary 


Term 


802.11 


10BASE-T 


100BASE-T 


ADSL 


Analog 


ATM 


Authenticate 


Binary 


Bit 


Bps 


Bridging 


Description 


A family of specifications for wireless 


LANs developed by a working group of the IEEE. This wireless Ethernet 
protocol, often called Wi-Fi. 


A designation for the type of wiring used by Ethernet networks with a data 
rate of 10 Mbps. Also known as Category 3 (CAT 3) wiring. See data rate, 
Ethernet. 


A designation for the type of wiring used by Ethernet networks with a data 
rate of 100 Mbps. Also known as Category 5 (CAT 5) wiring. See data 
rate, Ethernet. 


Asymmetric Digital Subscriber Line 

The most commonly deployed “flavor” of DSL for home users is 
asymmetrical DSL. The term asymmetrical refers to its unequal data rates 
for downloading and uploading (the download rate is higher than the 
upload rate). The asymmetrical rates benefit home users because they 
typically download much more data from the Internet than they upload. 


An analog signal is a signal that has had its frequency modified in some 
way, such as by amplifying its strength or varying its frequency, in order to 
add information to the signal. The voice component in DSL is an analog 
signal. See digital. 


Asynchronous Transfer Mode 

A standard for high-speed transmission of data, text, voice, and video, 
widely used within the Internet. ATM data rates range from 45 Mbps to 2.5 
Gbps. See data rate. 


To verify a user’s identity, such as by prompting for a password. 


The “base two” system of numbers that uses only two digits, O and 1, to 
represent all numbers. In binary, the number 1 is written as 1, 2 as 10, 3 
as 11, 4 as 100, etc. Although expressed as decimal numbers for 
convenience, IP addresses in actual use are binary numbers; e.g., the IP 
address 209.191.4.240 is 11010001.10111111.00000100.11110000 in 
binary. See bit, IP address, network mask. 


Short for “binary digit,” a bit is a number that can have two values, 0 or 1. 
See binary. 


bits per second 


Passing data from your network to your ISP and vice versa using the 
hardware addresses of the devices at each location. Bridging contrasts 
with routing which can add more intelligence to data transfers by using 
network addresses instead. The device can perform both routing and 
bridging. Typically, when both functions are enabled, the device routes IP 
data and bridges all other types of data. See routing. 
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Broadband 


Broadcast 


DHCP 


DHCP relay 


DHCP server 


Digital 


DNS 


Domain name 


Download 


DSL 


Encryption keys 


Ethernet 


Firewall 


A telecommunications technology that can send different types of data 
over the same medium. DSL is a broadband technology. 


To send data to all computers on a network. 


Dynamic Host Configuration Protocol 

DHCP automates address assignment and management. When a 
computer connects to the LAN, DHCP assigns it an IP address from a 
shared pool of IP addresses; after a specified time limit, DHCP returns the 
address to the pool. 


Dynamic Host Configuration Protocol relay 

A DHCP relay is a computer that forwards DHCP data between 
computers that request IP addresses and the DHCP server that assigns 
the addresses. Each of the device’s interfaces can be configured as a 
DHCP relay. See DHCP. 


Dynamic Host Configuration Protocol server 
A DHCP server is a computer that is responsible for assigning IP 
addresses to the computers on a LAN. See DHCP. 


Of data, having a form based on discrete values expressed as binary 
numbers (0’s and 1’s). The data component in DSL is a digital signal. See 
analog. 


Domain Name System 

The DNS maps domain names into IP addresses. DNS information is 
distributed hierarchically throughout the Internet among computers called 
DNS servers. For example, www.yahoo.com is the domain name 
associated with IP address 216.115.108.243. When you start to access a 
web site, a DNS server looks up the requested domain name to find its 
corresponding IP address. If the DNS server cannot find the IP address, it 
communicates with higher-level DNS servers to determine the IP address. 
See domain name. 


A domain name is a user-friendly name used in place of its associated IP 
address. Domain names must be unique; their assignment is controlled by 
the Internet Corporation for Assigned Names and Numbers (ICANN). 
Domain names are a key element of URLs, which identify a specific file at 
a web site. See DNS. 


To transfer data in the downstream direction, i.e., from the Internet to the 
user. 


Digital Subscriber Line 
A technology that allows both digital data and analog voice signals to 
travel over existing copper telephone lines. 


See network keys 


The most commonly installed computer network technology, usually using 
twisted pair wiring. Ethernet data rates are 10 Mbps and 100 Mbps. See 
also 10BASE-T, 100BASE-T, twisted pair. 


A firewall is protection between the Internet and your local network. It acts 
as the firewall in your car does, protecting the interior of the car from the 
engine. Your car's firewall has very small opening that allow desired 
connections from the engine into the cabin (gas pedal connection, etc), 
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FTP 


Gbps 


Host 


HTTP 


Hub 


ICMP 


IEEE 


Internet 


Intranet 


IP address 


ISP 


but if something happens to your engine, you are protected. 


The firewall in the router is very similar. Only the connections that you 
allow are passed through the firewall. These connections normally 
originate from the local network, such as users web browsing, checking e- 
mail, downloading files, and playing games. However, you can allow 
incoming connections so that you can run programs like a web server. 


File Transfer Protocol 

A program used to transfer files between computers connected to the 
Internet. Common uses include uploading new or updated files to a web 
server, and downloading files from a web server. 


Abbreviation of Gigabits per second, or one billion bits per second. 
Internet data rates are often expressed in Gbps. 


A device (usually a computer) connected to a network. 


Hyper-Text Transfer Protocol 
HTTP is the main protocol used to transfer data from web sites so that it 
can be displayed by web browsers. See web browser, web site. 


A hub is a place of convergence where data arrives from one or more 
directions and is forwarded out in one or more directions. It connects an 
Ethernet bridge/router to a group of PCs on a LAN and allows 
communication to pass between the networked devices. 


Internet Control Message Protocol 
An Internet protocol used to report errors and other network-related 
information. The ping command makes use of ICMP. 


The Institute of Electrical and Electronics Engineers is a technical 
professional society that fosters the development of standards that often 
become national and international standards. 


The global collection of interconnected networks used for both private and 
business communications. 


A private, company-internal network that looks like part of the Internet 
(users access information using web browsers), but is accessible only by 
employees. 


See TCP/IP. 


Internet Protocol address 

The address of a host (computer) on the Internet, consisting of four 
numbers, each from 0 to 255, separated by periods, e.g., 209.191.4.240. 
An IP address consists of a network ID that identifies the particular 
network the host belongs to, and a host ID uniquely identifying the host 
itself on that network. A network mask is used to define the network ID 
and the host ID. Because IP addresses are difficult to remember, they 
usually have an associated domain name that can be specified instead. 
See domain name, network mask. 


Internet Service Provider 
A company that provides Internet access to its customers, usually for a 
fee. 
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LAN 


LED 


MAC address 


Mask 


Mbps 


NAT 


Network 


Network keys 


Network mask 


NIC 


Packet 


Ping 


Port 


Local Area Network. 


A network limited to a small geographic area, such as a home or small 
office. 


Light Emitting Diode 
An electronic light-emitting device. The indicator lights on the front of the 
device are LEDs. 


Media Access Control address 

The permanent hardware address of a device, assigned by its 
manufacturer. MAC addresses are expressed as six pairs of hex 
characters, with each pair separated by colons. For example; 
NN:NN:NN:NN:NN:NN. 


See network mask. 


Abbreviation for Megabits per second, or one million bits per second. 
Network data rates are often expressed in Mbps. 


Network Address Translation 

A service performed by many routers that translates your network’s 
publicly known IP address into a private IP address for each computer on 
your LAN. Only your router and your LAN know these addresses; the 
outside world sees only the public IP address when talking to a computer 
on your LAN. 


A group of computers that are connected together, allowing them to 
communicate with each other and share resources, such as software, 
files, etc. A network can be small, such as a LAN, or very large, such as 
the Internet. 


(Also known as encryption keys.) 64-bit and 128-bit encryption keys used 
in WEP wireless security schemes. The keys encrypt data over the 
WLAN, and only wireless PCs configured with WEP keys that correspond 
to the keys configured on the device can send/receive encrypted data. 


A network mask is a sequence of bits applied to an IP address to select 
the network ID while ignoring the host ID. Bits set to 1 mean “select this 
bit” while bits set to O mean “ignore this bit.” For example, if the network 
mask 255.255.255.0 is applied to the IP address 100.10.50.1, the network 
ID is 100.10.50, and the host ID is 1. See binary, IP address, subnet. 


Network Interface Card 

An adapter card that plugs into your computer and provides the physical 
interface to your network cabling. For Ethernet NICs this is typically an 
RJ-45 connector. See Ethernet, RJ-45. 


Data transmitted on a network consists of units called packets. Each 
packet contains a payload (the data), plus overhead information such as 
where it came from (source address) and where it should go (destination 
address). 


Packet Internet (or Inter-Network) Groper 

A program used to verify whether the host associated with an IP address 
is online. It can also be used to reveal the IP address for a given domain 
name. 


A physical access point to a device such as a computer or router, through 
which data flows into and out of the device. 
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PPP 


PPPoA 


PPPoE 


Protocol 


Remote 


RIP 


RJ-11 


RJ-45 


Routing 


SDNS 


Subnet 


Subnet mask 


TCP 


TCP/IP 


Point-to-Point Protocol 

A protocol for serial data transmission that is used to carry IP (and other 
protocol) data between your ISP and your computer. The WAN interface 
on the device uses two forms of PPP called PPPoA and PPPoE. See 
PPPoA, PPPOE. 


Point-to-Point Protocol over ATM 

One of the two types of PPP interfaces you can define for a Virtual Circuit 
(VC), the other type being PPPoE. You can define only one PPPoA 
interface per VC. 


Point-to-Point Protocol over Ethernet 

One of the two types of PPP interfaces you can define for a Virtual Circuit 
(VC), the other type being PPPoA. You can define one or more PPPoE 
interfaces per VC. 


A set of rules governing the transmission of data. In order for a data 
transmission to work, both ends of the connection have to follow the rules 
of the protocol. 


In a physically separate location. For example, an employee away on 
travel who logs in to the company’s intranet is a remote user. 


Routing Information Protocol 
The original TCP/IP routing protocol. There are two versions of RIP: 
version | and version Il. 


Registered Jack Standard-11 

The standard plug used to connect telephones, fax machines, modems, 
etc. to a telephone port. It is a 6-pin connector usually containing four 
wires. 


Registered Jack Standard-45 
The 8-pin plug used in transmitting data over phone lines. Ethernet 
cabling usually uses this type of connector. 


Forwarding data between your network and the Internet on the most 
efficient route, based on the data’s destination IP address and current 
network conditions. A device that performs routing is called a router. 


Secondary Domain Name System (server) 
A DNS server that can be used if the primary DSN server is not available. 
See DNS. 


A subnet is a portion of a network. The subnet is distinguished from the 
larger network by a subnet mask that selects some of the computers of 
the network and excludes all others. The subnet's computers remain 
physically connected to the rest of the parent network, but they are 
treated as though they were on a separate network. See network mask. 


A mask that defines a subnet. See network mask. 


See TCP/IP. 


Transmission Control Protocol/Internet Protocol 

The basic protocols used on the Internet. TCP is responsible for dividing 
data up into packets for delivery and reassembling them at the 
destination, while IP is responsible for delivering the packets from source 
to destination. When TCP and IP are bundled with higher-level 
applications such as HTTP, FTP, Telnet, etc., TCP/IP refers to this whole 
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Telnet 


TFTP 


TKIP 


Triggers 


Twisted pair 


Unnumbered interfaces 


Upstream 


vc 


VCI 


VDSL 


suite of protocols. 


An interactive, character-based program used to access a remote 
computer. While HTTP (the web protocol) and FTP only allow you to 
download files from a remote computer, Telnet allows you to log into and 
use a computer from a remote location. 


Trivial File Transfer Protocol 
A protocol for file transfers, TFTP is easier to use than File Transfer 
Protocol (FTP) but not as capable or secure. 


Temporal Key Integrity Protocol (TKIP) provides WPA with a data 
encryption function. It ensures that a unique master key is generated for 
each packet, supports message integrity and sequencing rules and 
supports re-keying mechanisms. 


Triggers are used to deal with application protocols that create separate 
sessions. Some applications, such as NetMeeting, open secondary 
connections during normal operations, for example, a connection to a 
server is established using one port, but data transfers are performed on 
a separate connection. A trigger tells the device to expect these 
secondary sessions and how to handle them. 


Once you set a trigger, the embedded IP address of each incoming 
packet is replaced by the correct host address so that NAT can translate 
packets to the correct destination. You can specify whether you want to 
carry out address replacement, and if so, whether to replace addresses 
on TCP packets only, UDP packets only, or both. 


The ordinary copper telephone wiring used by telephone companies. It 
contains one or more wire pairs twisted together to reduce inductance and 
noise. Each telephone line uses one pair. In homes, it is most often 
installed with two pairs. For Ethernet LANs, a higher grade called 
Category 3 (CAT 3) is used for 10BASE-T networks, and an even higher 
grade called Category 5 (CAT 5) is used for 1OOBASE-T networks. See 
10BASE-T, 100BASE-T, Ethernet. 


An unnumbered interface is an IP interface that does not have a local 
subnet associated with it. Instead, it uses a router-id that serves as the 
source and destination address of packets sent to and from the router. 
Unlike the IP address of a normal interface, the router-id of an 
unnumbered interface is allowed to be the same as the IP address of 
another interface. For example, the WAN unnumbered interface of your 
device uses the same IP address of the LAN interface (192.168.1.1). 


The unnumbered interface is temporary — PPP or DHCP will assign a 
‘real’ IP address automatically. 


The direction of data transmission from the user to the Internet. 


Virtual Circuit 
A connection from your DSL router to your ISP. 


Virtual Circuit Identifier 
Together with the Virtual Path Identifier (VPI), the VCI uniquely identifies a 
VC. Your ISP will tell you the VCI for each VC they provide. See VC. 


Very High Speed Digital Subscriber Line 
It provides faster transmission rate and is capable of supporting high 
bandwidth applications like IPTV and bandwidth consumed applications. 
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VPI 


WAN 


Web browser 


Web page 


Web site 


WEP 


Wireless 


Wireless LAN 


WPA 


WWW 


Virtual Path Identifier 
Together with the Virtual Circuit Identifier (VCI), the VPI uniquely identifies 
a VC. Your ISP will tell you the VPI for each VC they provide. See VC. 


Wide Area Network 
Any network spread over a large geographical area, such as a country or 
continent. With respect to the device, WAN refers to the Internet. 


A software program that uses Hyper-Text Transfer Protocol (HTTP) to 
download information from (and upload to) web sites, and displays the 
information, which may consist of text, graphic images, audio, or video, to 
the user. Web browsers use Hyper-Text Transfer Protocol (HTTP). 
Popular web browsers include Netscape Navigator and Microsoft Internet 
Explorer. See HTTP, web site, WWW. 


A web site file typically containing text, graphics and hyperlinks (cross- 
references) to the other pages on that web site, as well as to pages on 
other web sites. When a user accesses a web site, the first page that is 
displayed is called the home page. See hyperlink, web site. 


A computer on the Internet that distributes information to (and gets 
information from) remote users through web browsers. A web site typically 
consists of web pages that contain text, graphics, and hyperlinks. See 
hyperlink, web page. 


Wired Equivalent Privacy (WEP) encrypts data over WLANs. Data is 
encrypted into blocks of either 64 bits length or 128 bits length. The 
encrypted data can only be sent and received by users with access to a 
private network key. Each PC on your wireless network must be manually 
configured with the same key as your device in order to allow wireless 
encrypted data transmissions. Eavesdroppers cannot access your 
network if they do not know your private key. WEP is considered to be a 
low security option. 


Wireless is a term used to describe telecommunications in which 
electromagnetic waves (rather than some form of wire) carry the signal 
over part or the entire communication path. See wireless LAN. 


A wireless LAN (WLAN) is one in which a mobile user can connect to a 
local area network (LAN) through a wireless (radio) connection. A 
standard, IEEE 802.11, specifies the technologies for wireless LANs. 


Wi-Fi Protected Access 


WPA is an initiative by the IEEE and Wi-Fi Alliance to address the security 
limitations of WEP. WPA provides a stronger data encryption method 
(called Temporal Key Integrity Protocol (TKIP)). It runs in a special, easy- 
to-set-up home mode called Pre-Shared Key (PSK) that allows you to 
manually enter a pass phrase on all the devices in your wireless network. 
WPA data encryption is based on a WPA master key. The master key is 
derived from the pass phrase and the network name (SSID) of the device. 


It provides improved data encryption and stronger user authentication. 
The mode of WPA supported on your device is called Pre-Shared Key 
(PSK), which allows you to manually enter a type of key called a pass 
phrase. 


World Wide Web 


Also called (the) Web. Collective term for all web sites anywhere in the 
world that can be accessed via the Internet. 
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